{"report_id":"ccdf9f00-d054-41cb-a03a-3898c0bb2002","version":6,"status":"done","tags":[],"date":"2026-01-03T05:31:24Z","url":{"schema":"http","addr":"bzengine.oksping.com/api/car/start?pdBx=26\u0026teBx=919\u0026xjid=103\u0026souBx=171\u0026chTyB=147\u0026xjk=ogp6lp\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026xjclid=857454280300","fqdn":"bzengine.oksping.com","domain":"oksping.com","tld":"com"},"ip":{"addr":"15.229.189.25","port":0,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"title":"22XX","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bzengine.oksping.com/api/car/start?pdBx=26\u0026teBx=919\u0026xjid=103\u0026souBx=171\u0026chTyB=147\u0026xjk=ogp6lp\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026xjclid=857454280300","fqdn":"bzengine.oksping.com","domain":"oksping.com","tld":"com"},"ip":{"addr":"15.229.189.25","port":0,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T05:31:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-12-28T22:19:30.36119Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"res.upapp.cc","ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-22","domain_rank":0,"first_seen":"2025-11-12T00:44:50.649001Z","last_seen":"2025-12-28T10:33:17.283097Z","alert_count":27,"request_count":27,"received_data":190124,"sent_data":11820,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"uapp.22xxbet.pro","ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":24,"request_count":24,"received_data":1350303,"sent_data":23818,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"bzengine.oksping.com","ip":{"addr":"15.229.189.25","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-25T03:37:22.3431Z","last_seen":"2025-08-25T03:37:22.3431Z","alert_count":0,"request_count":1,"received_data":4964,"sent_data":618,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.oksp.in","ip":{"addr":"104.18.52.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-11-25","domain_rank":745487,"first_seen":"2021-04-11T13:42:38Z","last_seen":"2026-01-01T16:30:45.732634Z","alert_count":0,"request_count":3,"received_data":1839,"sent_data":2142,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.oksp.in","ip":{"addr":"104.18.52.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-11-25","domain_rank":570501,"first_seen":"2022-12-17T17:36:49Z","last_seen":"2025-12-27T05:06:00.27346Z","alert_count":0,"request_count":1,"received_data":36005,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"80d799cf0acd9c92dcc207f5806debb6","sha1":"dfc6fe55607f2f8b3144117189349bd27a789a1d","sha256":"1a09eec68cf0be935af264374703655f35969f9dde8b4e246f5de0e8d231cf3c","sha512":"6c3180d33681eec7f76af2e008b53b6e8ab62c7111f38df53c2f207000a4f842c11b75f24fb2176ed202ece54e2c3f91ed4006ebaa4ff1eda11c2ee7888160e2","ssdeep":"","tlshash":"8ee0ec7ef6ef534666117078878b80012cb0a0271ad87c597cccd610af9616a89febf9","size":399,"data":"","first_seen":"2026-01-03T05:31:32.586187Z","last_seen":"2026-05-03T00:29:58.987724Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/js/qrious.min.js","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"283cfcf026c3f16cc7fe537daebd217d","sha1":"8017310ee572950086944a4c26e2017522add8e9","sha256":"892f9f28a344e47135270d02b9356b7896523e60ad4db9c0bd10574d1986ab6d","sha512":"a6e049cafe77baa9fe277e16907de1ba41285df38a608518ad49a042d1b0c55eddc3d081b723ed35f3b56b3ceabbb1533d1a13ceed0fd0fab29d176e7114da12","ssdeep":"384:j1wHJOCXOLl8aRuhBhp+zlwcqiI12m8jtv:jtLqaRAQzlvmQ","tlshash":"c7829595b3a1956a639a2ad50c3f244f42f2e4193418419cfbb2c9dfbd3c4c96039f3a","size":17584,"data":"","first_seen":"2023-03-11T14:29:07Z","last_seen":"2026-05-15T20:41:11.628493Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_app/js/pwaRe.js","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"955af460daf64902737a64fb49262323","sha1":"054797df13609fe1422981059d862dd39ac69702","sha256":"f5d2e57c865724d134199387c64719fcaa0fc36a1d034c665f6e818f3851aa25","sha512":"6760aea4149e17fbdb2071aa02201db823c3c25af71b417a8e4f01332d29b1b5f69f96331137c4ecb5846a3d9ee8ff906158ee4c2dfcd2bf6a0f5511cd39684e","ssdeep":"1536:xosZtLjr7t9y5tQPmm6aKQgk0KkVHcVtUq3lys0jk7+scp08oq4gcdvLad5+:xoKGQu8ZRkq3lxqkIJhTof","tlshash":"b3c396452e80da9d23464ebf3636b4e4e0660b5a78d04bc5d008fd28a8c6727fbfd975","size":128691,"data":"","first_seen":"2026-01-02T20:12:46.583893Z","last_seen":"2026-01-03T05:31:50.998404Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_app/js/platform.js","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3df4c78e4613a3ca5a8601f088f1dd70","sha1":"98396e5ccdef8e966b2885a5dcb25d301242ebb9","sha256":"57087c80231cd7cccb51191b256669f49a933412c64ae127d7a29ed576fb7af1","sha512":"8c3d5b92d3a2475b4d05405c22635a379b7b29d7d77c20744fa7b3be9b5cb3c3dbfe42d18124071e1122c44701f9c44f01e427c8c81a3f0df9ba10886fd75280","ssdeep":"384:4KLMHQpCGlYd+lUu0F05Vb3OOMfIfLoMPp2Aw5qYA83A8Alr9jgQXlYvcBYZNDrF:LoHGTvlH0F0tUMBRidzjjwo","tlshash":"e613a58aace560a21837e375cb92a404ff75a7274240a0837cad57502ff076552adffe","size":43948,"data":"","first_seen":"2025-11-12T00:44:58.307006Z","last_seen":"2026-05-03T00:29:58.960721Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-17T11:10:24.162126Z","times_seen":335796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.oksp.in/js/tag.js?aa=9566","fqdn":"s.oksp.in","domain":"oksp.in","tld":"in"},"ip":{"addr":"104.18.52.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b143ba7a6031339f41b58dda77718b50","sha1":"aa7b529fea08443819c1b1ea5627367e7a96bd1b","sha256":"8903e1fded64409855cc1892c7a4f9c51fa8e3e23cfaacbbc99974345eb6af57","sha512":"ba1de35fa4d1f9be4c3abe69bef26b047b34ea3e618f0939ddf4b7c518e16e2e9f1131f306d3d4f86d3e068b80e3d2ce50cdca98335a87c351a5d9370cad571e","ssdeep":"","tlshash":"a001441b5001442101a291bcecd7b73ce831115588dce06f648fc4c81c29b38c1f0fde","size":692,"data":"","first_seen":"2026-01-03T05:31:32.582109Z","last_seen":"2026-01-03T05:31:32.582109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.oksp.in/js/okTag.min.js?v=25051039","fqdn":"cdn.oksp.in","domain":"oksp.in","tld":"in"},"ip":{"addr":"104.18.52.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c93fc16cb7988aa301043302b19f599d","sha1":"366e36173cef1bd9ca0ac243ed721b4b093be362","sha256":"8bec445897e72a9bd36afeb284b8927ea876a58b95263437adee48755e8b591f","sha512":"aa5cabd4a649270fe22ab98e76c1383c13585c5ec2b2eec0c6a8a90e3dc9d186fcdc61bcd3e8b20eb42189548887c56676b67ac883c6d19a9091332a50376043","ssdeep":"384:wwOR8axLHGNVO/E/5Tk7+3boyZrMF5+pCqNFaiE8E0QIQfJo/O6FtwKfjdGnwQbe:nO2c7GMSGc9NwlJaFvEa/V65v0XG1C","tlshash":"6bf2f7d8b2c7b05922a338b6487f6006b23bbd14351d4843e57bd5c17869e9b813bfb9","size":35463,"data":"","first_seen":"2025-05-26T16:22:15.500019Z","last_seen":"2026-05-16T15:46:57.161518Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_app/js/crypto-js.js","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eb0cb6a8b6c2f141901ea80801d7cc8","sha1":"83ade24319068c5a79a64cc98871dc4179f5d9d9","sha256":"4a4fec5b74c40fd9ef4c07752b46bd717d85d5e5a988fdb2f28d9fe76ca3c6a3","sha512":"cd524c1d92bd1d4e45fd873b94a2d82c753a5f2503582bd59ee4c4471091997f80cfe77d1137b34cfd5448c92fbab924a097f556067ba7cc349657866d23cbdd","ssdeep":"6144:mtNPnzHvkWy0Hm1VotcyXznpZa6i7ze0MO2f81ruUMuLE3qiYqm13JQtHhnB63D2:mtNPnzHvkWy0Hm1VotcyXznpZa6i7ze7","tlshash":"4634a7849dd550c1ac77b3785b2db805e6a2732b0251ce4b7dbc9ab0cf79a208164fed","size":243594,"data":"","first_seen":"2025-11-12T00:44:58.32713Z","last_seen":"2026-03-05T15:05:29.711399Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:03.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uapp.22xxbet.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:03 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b801b91bf0e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-17T11:10:24.162126Z","times_seen":335796,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/deleted_data.webp","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /deleted_data.webp HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 164\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"c3d7960132b3da262b721e88cfb2583f\"\r\nlast-modified: Thu, 18 Sep 2025 13:31:01 GMT\r\nvary: Accept-Encoding\r\nage: 5932\r\ncache-control: max-age=172800\r\ncf-ray: 9b801b9afd40568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d7960132b3da262b721e88cfb2583f","sha1":"1612089211858694e09f6f715f3a0b4145dba674","sha256":"de88165fa4d58b4ad531b6f8d8facbc5dc00f73e96b617e503d36fee29c53cec","sha512":"f18e3f59f71cf7521938c90826fdc28bb7f3ef43749c4dbc48f46fd6fa1b293a58461b50e021b7569f4edd55b5129c4755e61e3d4f1205b7535f5a572a6ebe45","ssdeep":"","tlshash":"5dc08c96e6d100cc2b406a104be58f6628920f82ce95ed28d2e6e3e021e6308da24d9a","first_seen":"2024-06-17T05:40:02Z","last_seen":"2026-05-13T08:10:01.351966Z","times_seen":727,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/cdn-cgi/rum?","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1529\r\nOrigin: https://uapp.22xxbet.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1529,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":0,\"startTime\":1767418261339,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"c27eae71-4636-4ff5-9924-183772a3809e\",\"location\":\"https://uapp.22xxbet.pro/1767213347/tab.html\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":2093,\"domContentLoadedEventStart\":2903,\"domContentLoadedEventEnd\":2908,\"domComplete\":2909,\"loadEventStart\":2909,\"loadEventEnd\":2910,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"http/1.1\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":1099,\"domainLookupStart\":1100,\"domainLookupEnd\":1201,\"connectStart\":1201,\"connectEnd\":1212,\"secureConnectionStart\":1204,\"requestStart\":1212,\"responseStart\":1685,\"responseEnd\":1686,\"transferSize\":2145,\"encodedBodySize\":1692,\"decodedBodySize\":4047,\"name\":\"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":2910},\"siteToken\":\"e90f5abe07aa4787bc14205e4627b2c9\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://uapp.22xxbet.pro\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b801b979c16dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_app/js/crypto-js.js","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_app/js/crypto-js.js HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:05 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 04 Sep 2025 13:23:10 GMT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\netag: W/\"68b992be-3b78a\"\r\ncf-ray: 9b801b9aec3ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243594,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2eb0cb6a8b6c2f141901ea80801d7cc8","sha1":"83ade24319068c5a79a64cc98871dc4179f5d9d9","sha256":"4a4fec5b74c40fd9ef4c07752b46bd717d85d5e5a988fdb2f28d9fe76ca3c6a3","sha512":"cd524c1d92bd1d4e45fd873b94a2d82c753a5f2503582bd59ee4c4471091997f80cfe77d1137b34cfd5448c92fbab924a097f556067ba7cc349657866d23cbdd","ssdeep":"6144:mtNPnzHvkWy0Hm1VotcyXznpZa6i7ze0MO2f81ruUMuLE3qiYqm13JQtHhnB63D2:mtNPnzHvkWy0Hm1VotcyXznpZa6i7ze7","tlshash":"4634a7849dd550c1ac77b3785b2db805e6a2732b0251ce4b7dbc9ab0cf79a208164fed","first_seen":"2025-11-12T00:44:58.32713Z","last_seen":"2026-03-05T15:05:29.711399Z","times_seen":35,"resource_available":true,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":815,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ic_dun.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ic_dun.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 402\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"a5f28dfc41d6f313430bf40899d4f491\"\r\nlast-modified: Thu, 18 Sep 2025 12:05:32 GMT\r\nvary: Accept-Encoding\r\npriority: u=4;i=?0,cf-chb=(124;u=4;i=?0)\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok\r\ncache-control: max-age=172800\r\ncf-ray: 9b801b9afd37568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 40, 8-bit colormap, non-interlaced","md5":"a5f28dfc41d6f313430bf40899d4f491","sha1":"79f551aed5a39bc2ed22803758d5ce226ddd7075","sha256":"f18126ec000e0ee8fdf974c24c36b0a4366ff7aa67bb1ff1e11efda1ec29aec5","sha512":"6ff41e0e6264263e1eee804a5180054f9b7a2c9947c6980077eb085ad474e263bdd8dd98ef6a3170a0334ac60d38f9bf0c6252e0ca9a7e5b766cefd898a3f900","ssdeep":"","tlshash":"71e0f1bd9b44e1bcf8fea55692f2d6f0e8bb0e60bd14458d10d3a54cb16b390e1c0247","first_seen":"2025-11-12T00:44:58.238565Z","last_seen":"2026-03-05T15:05:29.706151Z","times_seen":35,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ic_addwishlist.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ic_addwishlist.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 366\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"87f4d89dc99eb735632e863bdea56ff7\"\r\nlast-modified: Thu, 18 Sep 2025 12:05:30 GMT\r\nvary: Accept-Encoding\r\npriority: u=4;i=?0,cf-chb=(117;u=4;i=?0)\r\ncf-polished: ok\r\ncf-bgj: imgq:85,h2pri\r\ncache-control: max-age=172800\r\ncf-ray: 9b801b9afd3b568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 72, 8-bit colormap, non-interlaced","md5":"87f4d89dc99eb735632e863bdea56ff7","sha1":"b99997bc5bd785b24d1a494f07ed50d89bceb23d","sha256":"eb81665f1381a11c96ffc522c76bdaeb788cbc97b52d888605cb45ad427f0eee","sha512":"c658c01a197e012f3d4d752b21efeb7fe90a95a215c8d02128afd28e379c2383af5fb12bd2ecde6eeb365bd5e539d639db78a2b197d90070381931c2589edaf7","ssdeep":"","tlshash":"d5e068f83e547c57bd61282b801a276bf581a4be298214ac5f6ae0310a61589c0169a2","first_seen":"2025-11-12T00:44:58.312091Z","last_seen":"2026-03-05T15:05:29.713457Z","times_seen":35,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/lve.svg","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /lve.svg HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 18 Sep 2025 12:29:14 GMT\r\netag: W/\"e67ee7eb26c30a1103770b3374cf94be\"\r\ncontent-encoding: br\r\ncf-ray: 9b801ba89a20568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e67ee7eb26c30a1103770b3374cf94be","sha1":"c2eeeb03924aa205991ec54ba00068e25573d774","sha256":"bba33cf077b71b0ca8fa7cefe00dfe78a0405fab17abce84028f3fa576fff320","sha512":"5bef419fd5cfac977c3d38d844e6564cc61bcb96c6ce6262ed6a740f6c05981126fcbd63b5a8be7ceefa626eedb1fcf68f01578a79705f7c1b2fc0fc34c28feb","ssdeep":"","tlshash":"4ff0c01cea4cb87c8016f3449a7d1441a30bf0ca90824d7ec48d7434d4238e7df4369d","first_seen":"2025-11-12T00:44:58.295293Z","last_seen":"2026-03-05T15:05:29.743991Z","times_seen":35,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bzengine.oksping.com/api/car/start?pdBx=26\u0026teBx=919\u0026xjid=103\u0026souBx=171\u0026chTyB=147\u0026xjk=ogp6lp\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026xjclid=857454280300","fqdn":"bzengine.oksping.com","domain":"oksping.com","tld":"com"},"ip":{"addr":"15.229.189.25","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T05:31:01.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.oksping.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 11 Oct 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:4F:8C:B6:92:6E:8E:6D:56:8C:E2:AA:44:41:42:10:6A:A3:C7:B9","sha256":"58:6F:78:63:8C:35:4E:97:CC:57:93:4C:FD:05:04:EC:B1:51:96:9E:97:11:74:94:2F:C2:1E:35:50:A4:1F:8C"}}},"request":{"raw":"GET /api/car/start?pdBx=26\u0026teBx=919\u0026xjid=103\u0026souBx=171\u0026chTyB=147\u0026xjk=ogp6lp\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026xjclid=857454280300 HTTP/1.1\r\nHost: bzengine.oksping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 03 Jan 2026 05:31:02 GMT\r\ncontent-length: 0\r\nlocation: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: consumerId=103_b805f8593367062f434b52795e90d865; Path=/; Domain=oksping.com; Max-Age=2592000; Expires=Mon, 02 Feb 2026 05:31:02 GMT; Secure; SameSite=None\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":4047,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":1887,"timings":{"blocked":831,"dns":83,"connect":214,"send":0,"wait":226,"receive":0,"ssl":528},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/css/add-to-home.css","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:03.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /css/add-to-home.css HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:03 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nage: 5931\r\nlast-modified: Fri, 19 Sep 2025 10:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6b715b49c0a43a7f49560bd885d60f14\"\r\ncontent-encoding: br\r\ncf-ray: 9b801b91d961568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6b715b49c0a43a7f49560bd885d60f14","sha1":"ca7d6c8221caf48eea963120149e65aa1e24b134","sha256":"4ee22a757f138434b95cb15ec85753e903cd22a4bb848e1eba45679c0b866ca8","sha512":"566df6b5c9853c87bc2762081ab7f20bfaa0b054812e4991a3578903c8e9bfc894d6fe3886b3dfaa4c9d12295b72049b3d2759d9de1402fed22a5ca5ae2a60b0","ssdeep":"192:Mp7gHuMI3lyBSbc2TQqHuM8JHuA1Pj2HuAFcs0q7tCHuARqmBD8HufzbJsSZa:+li1+","tlshash":"f622332cce05011aa776c51f2be10545ee65e113a7323e7bf6ee52488ff10b8166ce9d","first_seen":"2025-11-12T00:44:58.289697Z","last_seen":"2026-05-03T00:29:58.96431Z","times_seen":41,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":61,"dns":28,"connect":1,"send":0,"wait":7,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ios/world.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ios/world.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 2207\r\ncf-cache-status: HIT\r\ncache-control: max-age=172800\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"845a8a88c899e44bb4a380d523a2f18a\"\r\nlast-modified: Thu, 18 Sep 2025 12:28:51 GMT\r\nvary: Accept-Encoding\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: ok\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 5932\r\ncf-ray: 9b801b9a9d0c568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced","md5":"ec62c737fa8b455e2d006e2eab67397e","sha1":"3bf1d82abd9c4b7094ab5b5bebf259f450c0c9db","sha256":"4a5d43d765a582375a85625a21015a03a14d0218bf45a1d9b6802f17999dfaf9","sha512":"96c0a23221a772f71c5591b59952f168e9231248852bca4eefd2a4befaf20c04d09b8ff2f6284056bd1177ee03e6becaa126a5bfa594018021d98d07691bb473","ssdeep":"","tlshash":"f8415cfc2175371a47032b84249e81a98833f7ba16bfe124003013988d2a2a41f11bc5","first_seen":"2025-12-28T10:33:21.735433Z","last_seen":"2026-03-05T15:05:29.728774Z","times_seen":19,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/piexl/record/event","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"POST /pwa_api/piexl/record/event HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nContent-Type: application/json\r\nContent-Length: 57\r\nOrigin: https://uapp.22xxbet.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"upUuid\":null,\"avChannelId\":3232,\"eventName\":\"PageView\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://uapp.22xxbet.pro\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b801b9aec3cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"644de621fea619073a8122f1b29d65a3","sha1":"e83a5dc1feae5838f147bca4d08e29652a349435","sha256":"bdfc2799737023917826d9a0196cfc8da2036ff87905629316184221ffe66513","sha512":"603552d8a90176ad4afeb2b2a83e3e83029485203e55f076b42617328e10c7571389600af181d46c0f3e4e6cbf71dd59347d33906a4b2a9a3f4146cee1793e9f","ssdeep":"","tlshash":"b590047f1c4df157150d015c17c57510113571c33d70d7111c3c453110cf755035c154","first_seen":"2026-01-03T05:31:32.542432Z","last_seen":"2026-03-03T22:13:03.78515Z","times_seen":4,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/app/lang/5334","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/app/lang/5334 HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b801b9aec3edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fdd81dd1d10bf85188a7939dc15ccb1b","sha1":"11233528682060740225257cd095513e0e52ae36","sha256":"a0053895ac77768c1ee5e45a5afbc3645d64f64f04df96a5fa6182776e0adfdc","sha512":"89f8e9f1507338f42cd884f086de502816dfeea6e801b563b5ad7f26fd63e4a29b5f54abba94730dfabf47b646e947163db57e6c85d8fdeeaf572309a3ecd920","ssdeep":"","tlshash":"9da002d75c1c7687ac830064a54e560e41f471761617a6588ead6171424d163204dc38","first_seen":"2025-11-12T00:44:58.259327Z","last_seen":"2026-03-03T22:13:03.737057Z","times_seen":34,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/profile_pwa/5334/29949icon512.png","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:05.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/profile_pwa/5334/29949icon512.png HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.oksp.in/v1/spin/collect?","fqdn":"s.oksp.in","domain":"oksp.in","tld":"in"},"ip":{"addr":"104.18.52.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:05.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oksp.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Dec 2025 01:03:56 GMT","end":"Sun, 01 Mar 2026 01:03:55 GMT"},"fingerprint":{"sha1":"13:86:8D:78:E3:F4:20:C1:22:35:73:30:19:0B:C9:84:28:38:00:8F","sha256":"2A:5D:EF:86:41:84:F4:80:62:F5:C3:F9:85:8D:5B:F2:13:82:62:97:9A:44:80:71:0C:6F:0A:DB:1B:F1:15:41"}}},"request":{"raw":"POST /v1/spin/collect? HTTP/1.1\r\nHost: s.oksp.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 839\r\nOrigin: https://uapp.22xxbet.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":839,"data":"{\"v\":1,\"_cid\":\"faed01b113cfb270c624ee1aa793ad6c\",\"sr\":\"1280x1024\",\"sd\":\"24-bits\",\"ul\":\"en-US\",\"dl\":\"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\",\"dh\":\"uapp.22xxbet.pro\",\"dt\":\"\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"eid\":\"EVENT_CONTENT_VIEW\",\"data\":{},\"ts\":1767418265237,\"type\":\"event\",\"tag\":\"ec\",\"utms\":\"null\",\"aid\":4318,\"aaid\":9566}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:05 GMT\r\ncontent-length: 0\r\ncf-ray: 9b801ba06af1b50b-OSL\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/code_bg.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:07.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /code_bg.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 188\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"2f29ff26e69bfea484c33262099c67c8\"\r\nlast-modified: Thu, 18 Sep 2025 12:05:24 GMT\r\nvary: Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok\r\npriority: u=4;i=?0,cf-chb=(76;u=4;i=?0)\r\ncache-control: max-age=172800\r\ncf-ray: 9b801ba8ba27568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 421 x 425, 1-bit colormap, non-interlaced","md5":"2f29ff26e69bfea484c33262099c67c8","sha1":"415611d0875d929929be03e91f92850440514dea","sha256":"3e0f1f20cb286546e7a671aad19fff99f654f319fa0389d7691dbd2a2ce9ae6c","sha512":"0b819d8000bca50c1dd84644c1ba3b716f0e4b4d4d9db2e38f0fb9588bc19f2f7f845054456336eb30d2e1af2caec0f45106e8e2e6a86ff807523a98dee8f778","ssdeep":"","tlshash":"69c080dd41a14dbcf4b59172c07d2640c6314e5971390fd6331955273c593d08ba43df","first_seen":"2025-11-12T00:44:58.310402Z","last_seen":"2026-03-05T15:05:29.72681Z","times_seen":35,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ios/ios-safari-bouncing-arrow.svg","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ios/ios-safari-bouncing-arrow.svg HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 18 Sep 2025 12:28:48 GMT\r\netag: W/\"91369985f6e92c24b891e8c06a4e8291\"\r\ncontent-encoding: br\r\ncf-ray: 9b801b9aad11568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":902,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91369985f6e92c24b891e8c06a4e8291","sha1":"5bf8af249176c13e989887c50f481dec5958f9b1","sha256":"2f93dfe7bc28a2531ec10412c3aca53871823e717d086b826806e5f09b2a6147","sha512":"70403618eb5d24bb721e81bd41c4947adce4555e86766c4cdc97e607e5931b05bb466480bdd150f703cbe5310ae442c7eaa3f58333788a6497307b0d6595f348","ssdeep":"","tlshash":"eb11630d4b018f3d58bd8170dffbaa856678438306a0a0dff9432077890912f9af72d9","first_seen":"2025-11-12T00:44:58.255953Z","last_seen":"2026-03-05T15:05:29.700551Z","times_seen":35,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/js/qrious.min.js","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:03.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /js/qrious.min.js HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:03 GMT\r\ncontent-type: text/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nage: 5932\r\nlast-modified: Wed, 24 Dec 2025 12:04:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"283cfcf026c3f16cc7fe537daebd217d\"\r\ncontent-encoding: br\r\ncf-ray: 9b801b91c95f568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17584,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17412), with CRLF line terminators","md5":"283cfcf026c3f16cc7fe537daebd217d","sha1":"8017310ee572950086944a4c26e2017522add8e9","sha256":"892f9f28a344e47135270d02b9356b7896523e60ad4db9c0bd10574d1986ab6d","sha512":"a6e049cafe77baa9fe277e16907de1ba41285df38a608518ad49a042d1b0c55eddc3d081b723ed35f3b56b3ceabbb1533d1a13ceed0fd0fab29d176e7114da12","ssdeep":"384:j1wHJOCXOLl8aRuhBhp+zlwcqiI12m8jtv:jtLqaRAQzlvmQ","tlshash":"c7829595b3a1956a639a2ad50c3f244f42f2e4193418419cfbb2c9dfbd3c4c96039f3a","first_seen":"2023-03-11T14:29:07Z","last_seen":"2026-05-15T20:41:11.628493Z","times_seen":66,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":81,"dns":28,"connect":1,"send":0,"wait":11,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/google_play.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /google_play.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 7206\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"15bba2c0d398dad5f87a4e2c4ebc2648\"\r\nlast-modified: Thu, 18 Sep 2025 13:31:01 GMT\r\nvary: Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 373;u=5;i=?0)\r\ncache-control: max-age=172800\r\ncf-ray: 9b801b9a8cfe568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 666 x 150, 8-bit colormap, non-interlaced","md5":"15bba2c0d398dad5f87a4e2c4ebc2648","sha1":"0bf35429a77cc961d1e151933b582c129b08cdd8","sha256":"418a9f61f93e9c918b85db02d46d565b9bc5e61587c55819d8fb00c7d6815273","sha512":"4dc25f4cdc4cf656d03c59b3518a5d31139481588d23835acc6af0826a9e7ee9cbcf1299062cf288609af258078c7ac143f3f5af7db867ae14d14b51f0c6c3a5","ssdeep":"192:HaIPy7Rg98KO+WTa7mly/uEZ3H1Xwjwf8k1fDGMU1Ym:ElNz5a7hm4ajW1fDGMmj","tlshash":"5ae1afd2425640fce6cc629e017a5db507eb52907621c18187fe4e682bbf6c1df25db4","first_seen":"2026-01-03T05:31:32.547572Z","last_seen":"2026-03-05T15:05:29.699623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/games.jpg","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /games.jpg HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68502\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"3391dcc9d5f374bb3bf854c5f6b389b2\"\r\nlast-modified: Thu, 18 Sep 2025 12:05:28 GMT\r\nvary: Accept-Encoding\r\ncf-polished: ok\r\ncf-bgj: imgq:85,h2pri\r\npriority: u=1;i=?0,cf-chb=(235;u=3;i=?0 8050;u=5;i=?0 33353;u=6;i=?0)\r\ncache-control: max-age=172800\r\ncf-ray: 9b801b9a9d06568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 965x730, components 3","md5":"3391dcc9d5f374bb3bf854c5f6b389b2","sha1":"1b2efbecc1237cd908dc7cb81f83f564ce42ff02","sha256":"451ac89dbae46c97623381b07bdf4659bad0b9114cc4d189a9e523139cd6263a","sha512":"49cccc6bb9c75238379578c3464a934f065de462ee4222d6cd2ee50a18dce9f5833b53e7f821c52bf79a2970b3b94d902e60ae3603433e65e597e7768fc75b6e","ssdeep":"1536:qj/h48bpJzE0rtwQiCDrez5axPtiPLoTq0gWAvAV09HnQ:qj7piSJiC3eQPtooO0QvRQ","tlshash":"c8630261e2c92620eea5a0b3b25f338ed531c92580797bca33d10b5af7750f46833979","first_seen":"2026-01-03T05:31:32.54843Z","last_seen":"2026-01-03T05:31:32.54843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/1767213347/en-USicon192.png","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /1767213347/en-USicon192.png HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 36665\r\nlast-modified: Wed, 31 Dec 2025 20:36:13 GMT\r\npriority: u=6,i=?0\r\netag: \"6955893d-8f39\"\r\naccept-ranges: bytes\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b801b978c10dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"69c5cc7dd8aa5437e41afd2100d3aae5","sha1":"e5a4aa3e4244c7dfd02a13a288cfed8d8ce44c7f","sha256":"25e9658876fbf81d6bc252ecd27a0b4231e4015eaf54ebb49cac19e7c170d914","sha512":"112b8e90d1e1d86aae357f571ae3851f4e51bb815d9add9baedd9d4b4f757896ac6735a3f55ac5b1d18f1cad284c93a99628054725fc628d36a5d050c170586c","ssdeep":"768:52Luo/xu8BpRrJym5hTd5L2k8Vk5ZfLlhIi/HxzD:58z5Jd5Ndok8y5ZfxhZJ","tlshash":"45f2f25289a47c4ce0397158135817bb1cbaac27c9433cac3d5bc9b563ced11d5ceea6","first_seen":"2026-01-03T05:31:32.549565Z","last_seen":"2026-01-03T05:31:32.549565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ic_half_star.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ic_half_star.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 413\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"cb8d8a4ca11edc5825052146daeaa8fa\"\r\nlast-modified: Thu, 18 Sep 2025 12:05:33 GMT\r\nvary: Accept-Encoding\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 156;u=4;i=?0)\r\ncf-polished: ok\r\ncf-bgj: h2pri,imgq:85\r\ncache-control: max-age=172800\r\ncf-ray: 9b801ba458ab568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"cb8d8a4ca11edc5825052146daeaa8fa","sha1":"37011dcec6c1bc26681b72983928effbb95e8778","sha256":"91a33bed841097b702917e15ef35620b46a3f6ae67a049558e339a4ff4d6d28e","sha512":"8b208404dec6ecd2556123995ab978e69a3ae9cd7ea4d28c434459093b1191599842a9d4a85f4106a2aa776c877481062db0739c275db3cfb34901bce549f5db","ssdeep":"","tlshash":"0ce0f1f39120ccf3937f373a44c81920f62215956454222e1d0a799bdaf125e59882fe","first_seen":"2025-11-12T00:44:58.282165Z","last_seen":"2026-03-05T15:05:29.708973Z","times_seen":35,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/collect_data.webp","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /collect_data.webp HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 244\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"81226fe56259fe6976bc69271844349a\"\r\nlast-modified: Thu, 18 Sep 2025 13:31:01 GMT\r\nvary: Accept-Encoding\r\nage: 5932\r\ncache-control: max-age=172800\r\ncf-ray: 9b801b9afd3e568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81226fe56259fe6976bc69271844349a","sha1":"2798d1d805f0b48140fabf2a95a925c5cf240aa5","sha256":"6cd9fdd3b8fdb2df17d4d09fb17006c8eb39a3df753d04d541472a4c8e708284","sha512":"af656ec82fc287d897a2c227daf621f593a56fd333bab0c7e5664a24736683480cb73cbf91515cea777fd4b9ea309ad6b42ef261d835e8060fc98da7bd65e3e0","ssdeep":"","tlshash":"a3d02b606b3566590fd3b92522847ca51ac1b772d5589b6da5874888f424070a207214","first_seen":"2024-06-06T20:30:58Z","last_seen":"2026-05-17T04:32:23.202686Z","times_seen":872,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/profile/screenshot/2026/01/01/10003_20260101042805A025.jpg","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/profile/screenshot/2026/01/01/10003_20260101042805A025.jpg HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nCookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 165546\r\npriority: u=4,i=?0\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 31 Dec 2025 20:28:05 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b801ba89ceddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165546,"size_decoded":0,"mime_type":"image/jpeg","magic":"GIF image data, version 89a, 330 x 587","md5":"0fa433b4bad22d8c7bea5f66ccd6b486","sha1":"b9a1724ccff98626244f8486667b41717943fb3e","sha256":"7e3dd99f13098f3bf6ab3692e970fe8cf3f4fd26dd686ecc2eb14428f2529a8f","sha512":"6226a23fe6a3fa3bbb0947d77ce9c0ae02c479eafe10f0de537e2bab368e4c619d9013642467fc4c7d6ee2902a2ee1784dca1193675c46cf0da13a1bfb08b422","ssdeep":"3072:1RGMd8W2SXsSdq03WecUVrxXkwTeezXwAJYrGKcVC9MfaRGGyWT0KY2DCbb+jm8L:1RvGMXxd9YUTXNTeezXTJYrGtw94aRbl","tlshash":"a0f31343cda54ec4904ea1fa1f5e3cd1c6823b1d2eb0792fe161b9d3024ded8a1b5957","first_seen":"2025-11-12T00:44:58.308656Z","last_seen":"2026-02-25T05:25:59.231438Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":692,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/code_img.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /code_img.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 20173\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"69c065f142c37a684999fba4a2e159ae\"\r\nlast-modified: Thu, 18 Sep 2025 12:05:25 GMT\r\nvary: Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 198;u=5;i=?0)\r\ncf-polished: ok\r\ncache-control: max-age=172800\r\ncf-ray: 9b801ba8aa24568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 934 x 568, 8-bit colormap, non-interlaced","md5":"69c065f142c37a684999fba4a2e159ae","sha1":"642fa51af5cd19c1dedcfe61fb6e023e52ace072","sha256":"9bd1e98b637226e6b2c228af240f6cdb80ce8cd98a64939d2859d63b4d950764","sha512":"725b532a6192239bf4bad058947463ddc9dad2368ce08199fad84f2a2a4ec8c4606557d7062a28885671939236b620047b8a3c613eba91f79b227dcabbe10d9e","ssdeep":"384:srd95EpRW/ZsvJJFPHVxNVdt0Afws4iLkfE6R0tuccZ/3sjmVb+r0wEfyNYed5D:sn5Ei/2xPHVxEDsQQtKB3imgfEqNY6D","tlshash":"8992e10c81f3a46c54aa847243c568a55a689cae7fd0a25edc38b4867f9d4a0da4f873","first_seen":"2025-11-12T00:44:58.297492Z","last_seen":"2026-03-05T15:05:29.727997Z","times_seen":35,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/code_light.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:07.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /code_light.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 2042\r\ncf-cache-status: HIT\r\ncache-control: max-age=172800\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"b0a0ef0e53fa3f56d05636539f941c90\"\r\nlast-modified: Thu, 18 Sep 2025 12:05:27 GMT\r\nvary: Accept-Encoding\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: ok\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 272;u=5;i=?0)\r\ncf-ray: 9b801ba8ba26568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 253 x 178, 8-bit colormap, non-interlaced","md5":"4d86eb79cd33155e7c8c08c01ea1db3a","sha1":"6585014520018d5bb0c3bb54d0f7c7e571e9071e","sha256":"dc954006d3e69427ba76c6e25883b9a2628e665abef7d7477d74aaeebb5f2b51","sha512":"b9f7f6eaeac2c3b584963841935522c82e28fb83300b2e28c8b45f1f5b24c7237101e9023ee67bad3c7ac90a80ce9cf162cf924f45c8682e6382f69aa57ceeda","ssdeep":"","tlshash":"84412c958f03981f84933966e56758947a70bf8412e64c3c7885f42e1d8da3d74f608e","first_seen":"2025-12-28T10:33:21.807559Z","last_seen":"2026-03-05T15:05:29.731295Z","times_seen":18,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_app/assets/install3.html","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_app/assets/install3.html HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\nlast-modified: Thu, 18 Sep 2025 13:11:51 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b801b992c2cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29183,"size_decoded":0,"mime_type":"text/html","magic":"exported SGML document, Unicode text, UTF-8 text, with very long lines (4022), with CRLF line terminators","md5":"5bea4bb643b7dbd018b0cf6d56fdd67e","sha1":"8815807eead62a96532797990df8bbfab231f3ef","sha256":"04e8f5cf3348fe5e6e197682e0ad3d5ff58d1e5ecd19bd6f3d6a3790a6a45238","sha512":"4330ab73737cf29d13b3180d3f1cf92f49a0567966a75fd8611c2e550434b99383f2b3080df18461c6665d2b992ace3f8603dbde626c14055c9132c28f704d81","ssdeep":"768:haqgan04A6E8nQPMmoL63V5ICNy0Cgjtf1:ha7an04AuyMvL63PIV1c","tlshash":"eed2a27160c6543b56b385c8a9661b8efea2d707cb8a91047aec6bd35ff3c62dd07108","first_seen":"2026-01-03T05:31:32.557272Z","last_seen":"2026-01-03T05:31:32.557272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_app/json/pt-BR.json","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:05.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_app/json/pt-BR.json HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:05 GMT\r\ncontent-type: application/json\r\netag: W/\"6953c5a8-14b2\"\r\nlast-modified: Tue, 30 Dec 2025 12:29:28 GMT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b801b9c5c45dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5298,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0e12ca1f3f8e3e4a2634fa67d5c5902e","sha1":"16af6c4bea41b5c8d51b148c34c30acc405c447c","sha256":"b2017ba94802268c7a1f14779f42ac8adf0321e61ad3927436116a9939b23148","sha512":"e699e5d53afbe330cfdfd5d34a489b72310f0ebc80490bbe08f68f65770f08b06d483f720a9f4aa856fc1cc771a33ea9b8ab29cc1ed7a59f1d586a201cef03ca","ssdeep":"96:RcHlFZhQGC73pLod5kduOWgQXMAmydbckej7jm4dzJUWoU1dMw:RQlFL7C7ZEd5kdT3QXMAmyikMfpIzU1B","tlshash":"d0b192279a4a15771ab013827e4a8d47b04c2f1f63788e4fbaff1b4450cb550e5da72e","first_seen":"2026-01-02T20:12:46.604798Z","last_seen":"2026-03-03T22:13:03.789891Z","times_seen":16,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.oksp.in/js/okTag.min.js?v=25051039","fqdn":"cdn.oksp.in","domain":"oksp.in","tld":"in"},"ip":{"addr":"104.18.52.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:05.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oksp.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Dec 2025 01:03:56 GMT","end":"Sun, 01 Mar 2026 01:03:55 GMT"},"fingerprint":{"sha1":"13:86:8D:78:E3:F4:20:C1:22:35:73:30:19:0B:C9:84:28:38:00:8F","sha256":"2A:5D:EF:86:41:84:F4:80:62:F5:C3:F9:85:8D:5B:F2:13:82:62:97:9A:44:80:71:0C:6F:0A:DB:1B:F1:15:41"}}},"request":{"raw":"GET /js/okTag.min.js?v=25051039 HTTP/1.1\r\nHost: cdn.oksp.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=2592000\r\netag: W/\"c93fc16cb7988aa301043302b19f599d\"\r\nlast-modified: Tue, 13 May 2025 07:43:17 GMT\r\ncf-cache-status: HIT\r\nage: 2441447\r\nexpires: Mon, 02 Feb 2026 05:31:05 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b801b9d79d8b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35463,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35456), with no line terminators","md5":"c93fc16cb7988aa301043302b19f599d","sha1":"366e36173cef1bd9ca0ac243ed721b4b093be362","sha256":"8bec445897e72a9bd36afeb284b8927ea876a58b95263437adee48755e8b591f","sha512":"aa5cabd4a649270fe22ab98e76c1383c13585c5ec2b2eec0c6a8a90e3dc9d186fcdc61bcd3e8b20eb42189548887c56676b67ac883c6d19a9091332a50376043","ssdeep":"384:wwOR8axLHGNVO/E/5Tk7+3boyZrMF5+pCqNFaiE8E0QIQfJo/O6FtwKfjdGnwQbe:nO2c7GMSGc9NwlJaFvEa/V65v0XG1C","tlshash":"6bf2f7d8b2c7b05922a338b6487f6006b23bbd14351d4843e57bd5c17869e9b813bfb9","first_seen":"2025-05-26T16:22:15.500019Z","last_seen":"2026-05-16T15:46:57.161518Z","times_seen":187,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/profile_pwa/5334/en-USicon192.png?v=1767212692","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/profile_pwa/5334/en-USicon192.png?v=1767212692 HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nCookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 36665\r\npriority: u=6,i=?0\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 31 Dec 2025 20:24:52 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b801ba2dca2dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"69c5cc7dd8aa5437e41afd2100d3aae5","sha1":"e5a4aa3e4244c7dfd02a13a288cfed8d8ce44c7f","sha256":"25e9658876fbf81d6bc252ecd27a0b4231e4015eaf54ebb49cac19e7c170d914","sha512":"112b8e90d1e1d86aae357f571ae3851f4e51bb815d9add9baedd9d4b4f757896ac6735a3f55ac5b1d18f1cad284c93a99628054725fc628d36a5d050c170586c","ssdeep":"768:52Luo/xu8BpRrJym5hTd5L2k8Vk5ZfLlhIi/HxzD:58z5Jd5Ndok8y5ZfxhZJ","tlshash":"45f2f25289a47c4ce0397158135817bb1cbaac27c9433cac3d5bc9b563ced11d5ceea6","first_seen":"2026-01-03T05:31:32.549565Z","last_seen":"2026-01-03T05:31:32.549565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ic_full_star.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ic_full_star.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 335\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"aa96b9bd05228b5195bd92b8ed9ff100\"\r\nlast-modified: Thu, 18 Sep 2025 12:05:34 GMT\r\nvary: Accept-Encoding\r\ncf-polished: ok\r\npriority: u=4;i=?0,cf-chb=(119;u=4;i=?0)\r\ncf-bgj: h2pri,imgq:85\r\ncache-control: max-age=172800\r\ncf-ray: 9b801ba448aa568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 33, 8-bit colormap, non-interlaced","md5":"aa96b9bd05228b5195bd92b8ed9ff100","sha1":"3e646f40a5439487326bb67e0317f0bb8adb9a39","sha256":"86f3130a98b3538c34f65826bcb146a1351a6055c901d45a909df8cdbb00c44e","sha512":"fdd9b2d9019101a1495884686ef97ffa08c4a6c77fb04738616ddc4bb6bd86971766c6c93b3f42c2643151394b53053f5e43dc5c7d909e2b76a5cbb233b7ccbc","ssdeep":"","tlshash":"dae028bba1407b51d47f094f413bc4f070200e321810d01cbd0aec441c790047445fd3","first_seen":"2025-11-12T00:44:58.247449Z","last_seen":"2026-03-05T15:05:29.698153Z","times_seen":35,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":190,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/profile/screenshot/2026/01/01/10002_20260101042805A024.jpg","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/profile/screenshot/2026/01/01/10002_20260101042805A024.jpg HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nCookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 131770\r\npriority: u=4,i=?0\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 31 Dec 2025 20:28:05 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b801ba87ce7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131770,"size_decoded":0,"mime_type":"image/jpeg","magic":"GIF image data, version 89a, 330 x 587","md5":"e57666d412431bf9fa79b7dc96538257","sha1":"f0c3e225c6181dc3e7f1eacdbc014a5ba0b5035c","sha256":"cedb4401519b20a5e3cc73e9f9e6d31fa1f7a664ede2622b6d76969df57ccbd4","sha512":"f357431629924ba50ee6bc4a570ac2e50923fe8b27674095b7f030168d63a41a8fb35696ae95dba768f74afdb342b50eb03e5e306f9a4afe562be07bb63a5c8b","ssdeep":"3072:iy2cULOwV4CAHgBJFkb3jCU8DZLitcW5vLG+ft3L6:i7ckfuAJufCdZNOqkL6","tlshash":"ddd312654e04d840b04e28bddf3922adcfafac504876fbd1d504f81984a319ed82c7af","first_seen":"2025-12-02T10:12:30.789535Z","last_seen":"2026-02-25T05:25:59.197499Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ios/add.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ios/add.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1600\r\ncf-cache-status: HIT\r\ncache-control: max-age=172800\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"f1cf183da51ea34faba581bdee549491\"\r\nlast-modified: Thu, 18 Sep 2025 12:28:37 GMT\r\nvary: Accept-Encoding\r\ncf-polished: ok\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:85,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nage: 5932\r\ncf-ray: 9b801b9a9d08568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced","md5":"8ae9936bdd7dc35336c10b237c5f5ff2","sha1":"0d627d30a9cdb5da2b7b274014d3e51aa5d856bb","sha256":"f40489d2e9666b0ff32480c3a4371f2d7355ce9eac3c39880e397272fbbe4ce2","sha512":"35e6729cb6dd72c37845ddfaf99faba148a3a82b7f1b3a99668a148f159d570ea1380794460c806c7e0e0a8adbf782a1a436eff8f533f31e6f3faf27334bde7f","ssdeep":"","tlshash":"bf31eac22a0673b601d5663ed8221c64461cf370157d9a308743c566d66e8ba1ac395a","first_seen":"2025-12-28T10:33:21.73952Z","last_seen":"2026-03-05T15:05:29.712625Z","times_seen":19,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T05:31:02.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:21:56 GMT","end":"Tue, 31 Mar 2026 20:19:39 GMT"},"fingerprint":{"sha1":"CF:DF:D4:AC:93:3E:0E:A9:CE:A8:2B:E2:57:55:93:2D:A1:E2:80:D4","sha256":"D7:E9:3A:D0:D6:B9:50:C0:E3:C6:DC:95:7F:16:13:F1:FC:FB:41:6E:7D:3E:88:58:07:AC:60:61:24:3D:B9:25"}}},"request":{"raw":"GET /1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300 HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 05:31:03 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 31 Dec 2025 20:36:13 GMT\r\nServer-Timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=9,cfOrigin;dur=459\r\nSpeculation-Rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: DYNAMIC\r\nContent-Encoding: br\r\nCF-RAY: 9b801b8cec7d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4047,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1727), with CRLF, LF line terminators","md5":"0fa906c9e0a93e21c0e38fc4b7c66065","sha1":"aa79a215b6d4f83455240437f7cd3453fd209aba","sha256":"9468e4e58fbf51c60bd57bec5a814065cbbbf1ac0601d445cd45ed069ca22cab","sha512":"9ed889176871906df1d091fe003416f6abbec6037b3319ac0ef84352465b1600300d16b22285ffebd99e475757370ca22656372823c527ee15c8368ec8432153","ssdeep":"","tlshash":"1981a4936d458ce74221273945e3e008ed791a57a9ac8c087cdda5470f73bb880e7f29","first_seen":"2026-01-03T05:31:32.561831Z","last_seen":"2026-01-03T05:31:32.561831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":112,"dns":101,"connect":1,"send":0,"wait":472,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/app/link/29949","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/app/link/29949 HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b801b979c15dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1927,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"88605e364ad7c969b42ff7e052239d3a","sha1":"e362bf1c2370386cd4bcd4ff4ec0df4a8389892a","sha256":"c27afd8384d247e2217e628684112f05ab9b8dbb4f63c8fece2efe4b1ea29aa1","sha512":"2ed7b25de53b5549cd8742291f36df00c413ae54170a64cef330332e2d40ae92720cc783994758c0055b97d950899d0f78da4969e9569b4a2707e772bf4e0342","ssdeep":"","tlshash":"19410d97d5789c2d1f03cad545caba4a958f299bec900eb8e8afcd3c82f02390216148","first_seen":"2026-01-03T05:31:32.562586Z","last_seen":"2026-01-03T05:31:32.562586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/tips.svg","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /tips.svg HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nage: 5932\r\nlast-modified: Thu, 18 Sep 2025 12:29:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"37d4eae3e250f14c238ff3b1664a4823\"\r\ncontent-encoding: br\r\ncf-ray: 9b801b9afd3c568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":767,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37d4eae3e250f14c238ff3b1664a4823","sha1":"13d803de27a561061e3e790a7c0bd349bbf11a44","sha256":"2a3b918fa7f966b530085ae4939c6f0e353aee9fb626b885b7fd129c1cd1ba96","sha512":"57945a52cc6242c4709922770a792f2b528112ae4716b17207cdb1d7edb9507bedd9ea2e1443649e242ea3a7c3c3acc3aef6d1357b196b21ea8ed371cec22899","ssdeep":"","tlshash":"7b01d074d328e434c0bab7c1e2b86688d8577ace5183201da255961f41305ffdeeb2e8","first_seen":"2025-11-12T00:44:58.264152Z","last_seen":"2026-03-05T15:05:29.72967Z","times_seen":35,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/profile/screenshot/2026/01/01/10001_20260101042805A023.jpg","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/profile/screenshot/2026/01/01/10001_20260101042805A023.jpg HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nCookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 106770\r\npriority: u=4,i=?0\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 31 Dec 2025 20:28:05 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b801ba87ce6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106770,"size_decoded":0,"mime_type":"image/jpeg","magic":"GIF image data, version 89a, 330 x 587","md5":"fab42a664016ca264b4bb405225dd1b2","sha1":"4bd63949b87901d948d9c6729202f87b9b1ddadc","sha256":"a76531441dc858b3350058ab11e70a8754ed90245bee89a8f56c7e66ca349532","sha512":"c99391d0159d400e6477bcfce8d155455c1c31b5fc359f394abb7f94e7aedcc6e3b8cae7ce6dc5bdd4a49ae1949a5e742ec1875e6ccc97ea1baf7df273fd50c9","ssdeep":"3072:oBeuqNRRrPet4JGWa2U2ie14JUwqiJqdLbKHoBweQj0JUvP:tNRRzetIP1s3p03MoBwea","tlshash":"41a3120a67203e20679fddd33bf4d6197a51c48869da5cadd051923362b443f17a0fbd","first_seen":"2025-12-04T20:08:42.734704Z","last_seen":"2026-02-25T05:25:59.164673Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":649,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ic_share.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ic_share.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 530\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"78ca0eb40866c890d1affa0a2fc323f9\"\r\nlast-modified: Thu, 18 Sep 2025 12:29:07 GMT\r\nvary: Accept-Encoding\r\npriority: u=4;i=?0,cf-chb=(120;u=4;i=?0)\r\ncf-polished: ok\r\ncf-bgj: imgq:85,h2pri\r\ncache-control: max-age=172800\r\ncf-ray: 9b801b9afd3a568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 80, 8-bit colormap, non-interlaced","md5":"78ca0eb40866c890d1affa0a2fc323f9","sha1":"b8e9e4ab0dfaa1654c64ee41b67ac43f1eead5cc","sha256":"f20b88847319a06de4617fba0423f6da9bd231a8b30750033525ad29faa1ec72","sha512":"13fa14aec7265e9a17536055d786f614f06a2f627a47d7b4689f70728129c10854be40492d3d7139d9cc53e67f099325b421fb6d3de35f125cc2f4f6e494cd1e","ssdeep":"","tlshash":"cdf005f00b743f7d5cc91118c7db4102ce31857469ef486990319d38dc9a57db4e4267","first_seen":"2025-11-12T00:44:58.250753Z","last_seen":"2026-03-05T15:05:29.721525Z","times_seen":35,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/piexl/load_info","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:05.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"POST /pwa_api/piexl/load_info HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nContent-Type: application/json\r\nContent-Length: 856\r\nOrigin: https://uapp.22xxbet.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":856,"data":"{\"brand\":null,\"appName\":\"Firefox\",\"appVersion\":\"5.0 (X11)\",\"os\":\"Windows 10\",\"pixelClickId\":null,\"siteId\":5334,\"postLinkId\":\"29949\",\"platform\":\"OKSpin\",\"upUuid\":null,\"postParam\":null,\"postLink\":\"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"vendor\":\"\",\"width\":1280,\"height\":1024,\"title\":\"22XX\",\"installState\":\"0\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://uapp.22xxbet.pro\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b801ba08c86dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d092f037819b254da19b36f789964d68","sha1":"424ab9dd47f2f2bc35d96a62a2d101f1cf6ee02c","sha256":"2edd716b2fcf22213e5ec9980606beb22517e64d7c3ca6fc6144b690f657935e","sha512":"b7fe6bcd5aaf1e3808498d62ce8ecda8fc3daf9b21349b4791c1f4686bdfd576d61e60b4d753c404c828026b72e129c51b1abab5fd52672c5bca9ab5f26a9ef7","ssdeep":"","tlshash":"732165239526dd28ca224083518ffecc55cd1177bad5de08f88a4f0056f07fc206ead4","first_seen":"2026-01-03T05:31:32.565768Z","last_seen":"2026-01-03T05:31:32.565768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/1767213347/en-USicon192.png","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /1767213347/en-USicon192.png HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 36665\r\nlast-modified: Wed, 31 Dec 2025 20:36:13 GMT\r\npriority: u=6,i=?0\r\netag: \"6955893d-8f39\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b801b978c11dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"69c5cc7dd8aa5437e41afd2100d3aae5","sha1":"e5a4aa3e4244c7dfd02a13a288cfed8d8ce44c7f","sha256":"25e9658876fbf81d6bc252ecd27a0b4231e4015eaf54ebb49cac19e7c170d914","sha512":"112b8e90d1e1d86aae357f571ae3851f4e51bb815d9add9baedd9d4b4f757896ac6735a3f55ac5b1d18f1cad284c93a99628054725fc628d36a5d050c170586c","ssdeep":"768:52Luo/xu8BpRrJym5hTd5L2k8Vk5ZfLlhIi/HxzD:58z5Jd5Ndok8y5ZfxhZJ","tlshash":"45f2f25289a47c4ce0397158135817bb1cbaac27c9433cac3d5bc9b563ced11d5ceea6","first_seen":"2026-01-03T05:31:32.549565Z","last_seen":"2026-01-03T05:31:32.549565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/xing.svg","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /xing.svg HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 18 Sep 2025 12:29:16 GMT\r\netag: W/\"c212dd7eb8636caf7a8e67b19c1ca65f\"\r\ncontent-encoding: br\r\ncf-ray: 9b801b9afd39568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c212dd7eb8636caf7a8e67b19c1ca65f","sha1":"21fb001acf826c31b4b8a21db03cb86b7e6e7a02","sha256":"ba01572735091ce493152a4da5925c1c6b3281812c2d0dd20f0fb988a68f3c8f","sha512":"97c646d40b789bc33671f3633d415d2832b2805030c008c2a9be8f9a16c6c905a4af591caa56538bd6f677a1acf64d60e704bd8dc84f52f8f24f4c81871f70f4","ssdeep":"","tlshash":"ae11e1a4d339bc354145c7b775b810ae6643b0fe7633160cc68a9d29d744ce91f68b68","first_seen":"2025-11-12T00:44:58.241161Z","last_seen":"2026-03-05T15:05:29.739811Z","times_seen":35,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/profile/upload/avatar/2026/01/01/cat_pic_0220_20240626174338A065_20260101042940A027.jpg","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/profile/upload/avatar/2026/01/01/cat_pic_0220_20240626174338A065_20260101042940A027.jpg HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nCookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20344\r\npriority: u=4,i=?0\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 31 Dec 2025 20:29:40 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b801ba89cefdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20344,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=225, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=225], baseline, precision 8, 128x128, components 3","md5":"a351de70bdabc37d7726fb4a56813e93","sha1":"cfcb1ab8dff9fbc385b153f96d82be41949ee3d1","sha256":"2aabb43075b4145a8cefcea3e58a9c7c76f417a47df19b2ba857e1cd84fdd5f9","sha512":"68c2ffe8636c071e7ddfd8ffcb6e60e132aab4fb45069e08ac47a81291d261b558da7562f23a6fea42c6c682d37d865fa2a69a5e953924cde98a5f9796ace0f6","ssdeep":"384:v7im5VLGK+7oWMPih7im5VLGK+7oWgnC297im5VLGK+7oWt:Dim5VKtMP4im5VKtg7im5VKtt","tlshash":"43928c20b78d8d52f6e1143988b6eb826311fc9843f34d82745d28113f7a3daa53ce57","first_seen":"2025-12-04T00:05:36.514794Z","last_seen":"2026-03-03T22:13:03.831622Z","times_seen":8,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/profile/screenshot/2026/01/01/10006_20260101042805A026.jpg","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/profile/screenshot/2026/01/01/10006_20260101042805A026.jpg HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nCookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 279547\r\npriority: u=4,i=?0\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 31 Dec 2025 20:28:05 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b801ba89ceedfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279547,"size_decoded":0,"mime_type":"image/jpeg","magic":"GIF image data, version 89a, 330 x 587","md5":"a4c3cde41532044aadfdeb8221b2f6ca","sha1":"1360eb430e0cf0c0792395faca5bd045cc9fb45d","sha256":"9ec0cefdcf67696c12d5d6b2801f2dfda7002c429123b6527273437f8527c5ae","sha512":"20b67350fca64a4078345805ca055421c65522332221dd3cdc7a9104ea46a7368c2df3b0065137f0a1d6d9d7a04284a8050f340f295887cac1774a037e50a19b","ssdeep":"6144:dIcDk7sT90zhlZ4ePLKzXErFFtyEMorPnxnzHtA0l:dIjsCzhf4mhFMEnrP5GK","tlshash":"cb542331c7bf101660faae588deb634c9cdd4de98a0a7553c10c44caa6e341b2cbf963","first_seen":"2025-11-12T00:44:58.222398Z","last_seen":"2026-03-03T22:13:03.756657Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":836,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ic_arrowhead.png","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:07.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ic_arrowhead.png HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 517\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"7f5a40e6f82bf2100e08b4ed25fe6105\"\r\nlast-modified: Thu, 18 Sep 2025 12:05:31 GMT\r\nvary: Accept-Encoding\r\ncf-polished: ok\r\ncf-bgj: imgq:85,h2pri\r\npriority: u=4;i=?0,cf-chb=(96;u=4;i=?0)\r\ncache-control: max-age=172800\r\ncf-ray: 9b801ba8ba28568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 204, 8-bit colormap, non-interlaced","md5":"7f5a40e6f82bf2100e08b4ed25fe6105","sha1":"ae1c85e35bf723dd15ea171f40ec5ebfdd70a3c9","sha256":"f17ca24f4e696f51fc164a9daa78a852270cf3301c90ade00745b3cc435298aa","sha512":"43baf83e8b9e88971359a431a4b68a0c9907227092eb8b854626f3b6077da59faf35ef1869657fa477ef70b391cc9306a1de1e632ff471ebb4998e335736d35f","ssdeep":"","tlshash":"99f0c444b2c8650ce7f7f23eb0760f204ce7c06cb138a72090d1295a04b618700e4e86","first_seen":"2025-11-12T00:44:58.253123Z","last_seen":"2026-03-05T15:05:29.734781Z","times_seen":35,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/profile_pwa/5334/en-USicon192.png?v=1767212692","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/profile_pwa/5334/en-USicon192.png?v=1767212692 HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nCookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 36665\r\npriority: u=4,i=?0\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 31 Dec 2025 20:24:52 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 0\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b801ba45cbadfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"69c5cc7dd8aa5437e41afd2100d3aae5","sha1":"e5a4aa3e4244c7dfd02a13a288cfed8d8ce44c7f","sha256":"25e9658876fbf81d6bc252ecd27a0b4231e4015eaf54ebb49cac19e7c170d914","sha512":"112b8e90d1e1d86aae357f571ae3851f4e51bb815d9add9baedd9d4b4f757896ac6735a3f55ac5b1d18f1cad284c93a99628054725fc628d36a5d050c170586c","ssdeep":"768:52Luo/xu8BpRrJym5hTd5L2k8Vk5ZfLlhIi/HxzD:58z5Jd5Ndok8y5ZfxhZJ","tlshash":"45f2f25289a47c4ce0397158135817bb1cbaac27c9433cac3d5bc9b563ced11d5ceea6","first_seen":"2026-01-03T05:31:32.549565Z","last_seen":"2026-01-03T05:31:32.549565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/encrypted_data.webp","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /encrypted_data.webp HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 200\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"df61c422ecae7409b8697262192a44fc\"\r\nlast-modified: Thu, 18 Sep 2025 13:31:01 GMT\r\nvary: Accept-Encoding\r\nage: 5931\r\ncache-control: max-age=172800\r\ncf-ray: 9b801b9afd3f568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df61c422ecae7409b8697262192a44fc","sha1":"d402d28a126d995638a2f434ddbd2b276887b599","sha256":"329ad3c7ac436f964c7a8cfcc6a74c859b51cdabd8974a65f0836410b11f2dc5","sha512":"32b50246ff38917d79c18c2750fdddafd991ebb72f9b1eadf0ff928fa0f083ee1c6ba74f697549e50743e89e1e9fb547e666a895801669c7ac65219691492562","ssdeep":"","tlshash":"63d023089d27c1984e281f1d15b145941e748d547102836d1111c5d8e0304102e5698d","first_seen":"2024-07-13T05:31:04Z","last_seen":"2026-05-17T04:16:31.69261Z","times_seen":795,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ios/ios-safari-sharing-api-button.svg","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ios/ios-safari-sharing-api-button.svg HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nage: 5932\r\nlast-modified: Thu, 18 Sep 2025 12:28:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"996167bf0a5f7f5c1cdbe2c1670f7259\"\r\ncontent-encoding: br\r\ncf-ray: 9b801b9a9d07568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"996167bf0a5f7f5c1cdbe2c1670f7259","sha1":"0b22fa62f3ef45472860c88dfb6899d500a87abf","sha256":"da6bf7a249baec8af1ed7cb3436195ac4fac8d6cc170641071b5ca2f034f7d3c","sha512":"c9617f2f24bb4f6475a737da95628ba671247e62979b1c69272932abd92a963620a289ead4946f0bc770d94a28c198719d2ff3a20d6addb53fb366cf9e0d2291","ssdeep":"","tlshash":"5321cc6203418b99f75c4035e3f8258e7679e4eb92e0e4c8b71b2427d44c0ec6a6c7a8","first_seen":"2025-11-12T00:44:58.29189Z","last_seen":"2026-03-05T15:05:29.702876Z","times_seen":35,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/ios/android-chrome-bouncing-arrow.svg","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /ios/android-chrome-bouncing-arrow.svg HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nage: 5931\r\nlast-modified: Thu, 18 Sep 2025 12:28:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a7f83fe425f18b9e6487fef5aec10d4\"\r\ncontent-encoding: br\r\ncf-ray: 9b801b9aad12568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":541,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a7f83fe425f18b9e6487fef5aec10d4","sha1":"9546bd11edbff423673903c82b923ea90836201f","sha256":"e86a0eca32bdb75f6b18880c4d15ab6c93abe92d9f53eb993fcf0ac1023fdafd","sha512":"7a9507e38bb02429440e65bd808448810e1885db51d2a555dc67d558aefbd5f5923c09c23cd95550b892f259b2d906bdfb1405c156b2af416c62599a3e30de30","ssdeep":"","tlshash":"bff0e1d9154c62bcf910f6f5622c2c79582178767cc301d8ca92662b35506de6c4968d","first_seen":"2025-11-12T00:44:58.244421Z","last_seen":"2026-03-05T15:05:29.71887Z","times_seen":35,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_app/js/pwaRe.js","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:03.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_app/js/pwaRe.js HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:03 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6957cd4f-1f6b3\"\r\nlast-modified: Fri, 02 Jan 2026 13:51:11 GMT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b801b914bc9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128691,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"955af460daf64902737a64fb49262323","sha1":"054797df13609fe1422981059d862dd39ac69702","sha256":"f5d2e57c865724d134199387c64719fcaa0fc36a1d034c665f6e818f3851aa25","sha512":"6760aea4149e17fbdb2071aa02201db823c3c25af71b417a8e4f01332d29b1b5f69f96331137c4ecb5846a3d9ee8ff906158ee4c2dfcd2bf6a0f5511cd39684e","ssdeep":"1536:xosZtLjr7t9y5tQPmm6aKQgk0KkVHcVtUq3lys0jk7+scp08oq4gcdvLad5+:xoKGQu8ZRkq3lxqkIJhTof","tlshash":"b3c396452e80da9d23464ebf3636b4e4e0660b5a78d04bc5d008fd28a8c6727fbfd975","first_seen":"2026-01-02T20:12:46.583893Z","last_seen":"2026-01-03T05:31:50.998404Z","times_seen":3,"resource_available":true,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":580,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_app/js/platform.js","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:03.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_app/js/platform.js HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:03 GMT\r\ncontent-type: application/javascript\r\netag: W/\"68b992c3-abac\"\r\nlast-modified: Thu, 04 Sep 2025 13:23:15 GMT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b801b914bc8dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43948,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (568), with CRLF line terminators","md5":"3df4c78e4613a3ca5a8601f088f1dd70","sha1":"98396e5ccdef8e966b2885a5dcb25d301242ebb9","sha256":"57087c80231cd7cccb51191b256669f49a933412c64ae127d7a29ed576fb7af1","sha512":"8c3d5b92d3a2475b4d05405c22635a379b7b29d7d77c20744fa7b3be9b5cb3c3dbfe42d18124071e1122c44701f9c44f01e427c8c81a3f0df9ba10886fd75280","ssdeep":"384:4KLMHQpCGlYd+lUu0F05Vb3OOMfIfLoMPp2Aw5qYA83A8Alr9jgQXlYvcBYZNDrF:LoHGTvlH0F0tUMBRidzjjwo","tlshash":"e613a58aace560a21837e375cb92a404ff75a7274240a0837cad57502ff076552adffe","first_seen":"2025-11-12T00:44:58.307006Z","last_seen":"2026-05-03T00:29:58.960721Z","times_seen":41,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":457,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/css/installcss.css","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:03.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /css/installcss.css HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:03 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nage: 5929\r\nlast-modified: Sat, 11 Oct 2025 08:31:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"52756b40fb25eb274f3ab47e43796a6b\"\r\ncontent-encoding: br\r\ncf-ray: 9b801b91c95e568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39354,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"52756b40fb25eb274f3ab47e43796a6b","sha1":"2770737a6ccaa9b6d88b3cf2f3f50e158e04937d","sha256":"b9fdc21132cfee7512624f3791a3d1347ed91ba18fe74f93a3067e42fdad6866","sha512":"87c215f66cac2b85da0b061a3bc43a798907c419dd18ddb5aad70e3304a3a21411fbfde26148d96cebea45eaa55135aba0beacd7eedd9ac6e86fe0a54eaf2092","ssdeep":"384:GbaEpHIdcOqSKkKlR0Nzy/1jef9VIdQo/AGUEVYo9jsDs9LA:l6qKkKlmNNSYo9jsDs9k","tlshash":"05034528d9022103b237dbb46fa50749f2955413870251b9bfca728d8ffa12d97a2fdd","first_seen":"2026-01-03T05:31:32.580438Z","last_seen":"2026-05-03T00:29:58.97484Z","times_seen":11,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":57,"dns":30,"connect":1,"send":0,"wait":12,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/arrow2.svg","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /arrow2.svg HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 18 Sep 2025 12:28:46 GMT\r\netag: W/\"ab3f40e32481a238273d9c90e5860811\"\r\ncontent-encoding: br\r\ncf-ray: 9b801b9a8d05568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab3f40e32481a238273d9c90e5860811","sha1":"c55f88799652c019a7d7dbd17d6fcea07e05a478","sha256":"7389b0997c581f9532099fcae528855b9388193f4df88e8dc3b194c0c178a177","sha512":"71db41475fbb9dc9f491fb5e8f6f30ca163cf3bf52ce2211f1c2db43c23b99476ebaa5d8ddc27333748b34232e946b35d28be1ea6d613e18684a9accd47cc37b","ssdeep":"","tlshash":"eaf0474ca314e11c4c25635f51b80e60d14360c357c3027cc4427c76c902ef9ba3d2b8","first_seen":"2025-11-12T00:44:58.345269Z","last_seen":"2026-03-05T15:05:29.697185Z","times_seen":35,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.oksp.in/js/tag.js?aa=9566","fqdn":"s.oksp.in","domain":"oksp.in","tld":"in"},"ip":{"addr":"104.18.52.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oksp.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Dec 2025 01:03:56 GMT","end":"Sun, 01 Mar 2026 01:03:55 GMT"},"fingerprint":{"sha1":"13:86:8D:78:E3:F4:20:C1:22:35:73:30:19:0B:C9:84:28:38:00:8F","sha256":"2A:5D:EF:86:41:84:F4:80:62:F5:C3:F9:85:8D:5B:F2:13:82:62:97:9A:44:80:71:0C:6F:0A:DB:1B:F1:15:41"}}},"request":{"raw":"GET /js/tag.js?aa=9566 HTTP/1.1\r\nHost: s.oksp.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Fri, 01 Jan 2020 00:00:00 GMT\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; preload;\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b801b9b7f2f5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":692,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"b143ba7a6031339f41b58dda77718b50","sha1":"aa7b529fea08443819c1b1ea5627367e7a96bd1b","sha256":"8903e1fded64409855cc1892c7a4f9c51fa8e3e23cfaacbbc99974345eb6af57","sha512":"ba1de35fa4d1f9be4c3abe69bef26b047b34ea3e618f0939ddf4b7c518e16e2e9f1131f306d3d4f86d3e068b80e3d2ce50cdca98335a87c351a5d9370cad571e","ssdeep":"","tlshash":"a001441b5001442101a291bcecd7b73ce831115588dce06f648fc4c81c29b38c1f0fde","first_seen":"2026-01-03T05:31:32.582109Z","last_seen":"2026-01-03T05:31:32.582109Z","times_seen":1,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":79,"dns":75,"connect":1,"send":0,"wait":171,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.upapp.cc/share_data.webp","fqdn":"res.upapp.cc","domain":"upapp.cc","tld":"cc"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:04.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"255f5210.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 11:15:09 GMT","end":"Sat, 14 Feb 2026 12:15:05 GMT"},"fingerprint":{"sha1":"8A:3D:25:5B:85:F9:5C:E4:3C:16:16:B0:33:A5:F0:D6:68:C7:36:23","sha256":"FB:A7:EE:10:47:A1:52:E3:9F:22:F4:2C:80:73:8C:60:37:7F:E2:DD:64:CE:CB:BE:3B:F0:9C:A5:D6:5D:39:65"}}},"request":{"raw":"GET /share_data.webp HTTP/1.1\r\nHost: res.upapp.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 200\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"26ae874f3b7051bc5b112960c251080f\"\r\nlast-modified: Thu, 18 Sep 2025 12:29:15 GMT\r\nvary: Accept-Encoding\r\nage: 5931\r\ncache-control: max-age=172800\r\ncf-ray: 9b801b9afd3d568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26ae874f3b7051bc5b112960c251080f","sha1":"1d6b38f7fe58dc79cc66cc0a3ee42caaa096b686","sha256":"8c66b3cb207515328ac21bdbbda1b90a74d7cac66267352048bfd7e4e1efe627","sha512":"88dbfe63b9a7374528308bd4ac891535c310ffc2277c3a44004772accea7115d8a1df77ecb56edf573000df4afc79e7e9524b4fb8c8e8dbac2384860306f0c31","ssdeep":"","tlshash":"2fd0224aeeae8a646d29fcb53453e630123aca8a21a4b0b0c85702e941b04f02e01c8b","first_seen":"2024-06-06T20:30:57Z","last_seen":"2026-05-17T04:32:23.218083Z","times_seen":934,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"res.upapp.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/app/5334/pt-BR","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:05.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/app/5334/pt-BR HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b801b9e1c64dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4805,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a5f0438c9e1620087a5b3ceb91a3eb9f","sha1":"685578b283c426d87c36b13026b931612bbeef80","sha256":"dd376a69d48d97318ebc66fffd0aadffdd1456b1c077b3013cacf178f2301b1a","sha512":"69777a550f0929242990c7d88fcc44c7911e390111d2ba7770513c79856f798bccc42f26fdf2a34b203771689d190ac44b9860a2951a5c69101079e5185cdc59","ssdeep":"96:WzmaJa/L3Jwfu+VmVMKBueePvePiuPu82bB4cDZKqV8hpfo62pL:WzmZrJwfu4wMKBupuPufB4cDZKqV8hpu","tlshash":"baa12229452add7e171725c6abcebe8350cd311b86889f74eede8f0c40e947d1a2e146","first_seen":"2026-01-03T05:31:32.583634Z","last_seen":"2026-01-03T05:31:32.583634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.oksp.in/v1/spin/collect?v=1\u0026_cid=faed01b113cfb270c624ee1aa793ad6c\u0026sr=1280x1024\u0026sd=24-bits\u0026ul=en-US\u0026dl=https%3A%2F%2Fuapp.22xxbet.pro%2F1767213347%2Ftab.html%3ForderId%3D857465960765%26consumerId%3D103_b805f8593367062f434b52795e90d865%26souBx%3D171%26keyHit%3Dfalse%26promotion_id%3D29949%26pixel_id%3D277781858530317%26oneid%3D9c915813e77fb3c7bcd94f7347a52255%26tid%3D4944c6184faa0f438c9b01b130429d83%26advertId%3D587%26teBx%3D919%26returnFlag%3D1%26xjid%3D103%26click_id%3DXa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv%26xjk%3Dogp6lp%26slotId%3D103%26chTyB%3D147%26pdBx%3D26%26xjclid%3D857454280300\u0026dh=uapp.22xxbet.pro\u0026dt=\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ts=1767418265237\u0026type=pageview\u0026tag=ec\u0026utms=null\u0026aid=4318\u0026aaid=9566","fqdn":"s.oksp.in","domain":"oksp.in","tld":"in"},"ip":{"addr":"104.18.52.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:05.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oksp.in","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Dec 2025 01:03:56 GMT","end":"Sun, 01 Mar 2026 01:03:55 GMT"},"fingerprint":{"sha1":"13:86:8D:78:E3:F4:20:C1:22:35:73:30:19:0B:C9:84:28:38:00:8F","sha256":"2A:5D:EF:86:41:84:F4:80:62:F5:C3:F9:85:8D:5B:F2:13:82:62:97:9A:44:80:71:0C:6F:0A:DB:1B:F1:15:41"}}},"request":{"raw":"GET /v1/spin/collect?v=1\u0026_cid=faed01b113cfb270c624ee1aa793ad6c\u0026sr=1280x1024\u0026sd=24-bits\u0026ul=en-US\u0026dl=https%3A%2F%2Fuapp.22xxbet.pro%2F1767213347%2Ftab.html%3ForderId%3D857465960765%26consumerId%3D103_b805f8593367062f434b52795e90d865%26souBx%3D171%26keyHit%3Dfalse%26promotion_id%3D29949%26pixel_id%3D277781858530317%26oneid%3D9c915813e77fb3c7bcd94f7347a52255%26tid%3D4944c6184faa0f438c9b01b130429d83%26advertId%3D587%26teBx%3D919%26returnFlag%3D1%26xjid%3D103%26click_id%3DXa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv%26xjk%3Dogp6lp%26slotId%3D103%26chTyB%3D147%26pdBx%3D26%26xjclid%3D857454280300\u0026dh=uapp.22xxbet.pro\u0026dt=\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ts=1767418265237\u0026type=pageview\u0026tag=ec\u0026utms=null\u0026aid=4318\u0026aaid=9566 HTTP/1.1\r\nHost: s.oksp.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 05:31:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\ncf-ray: 9b801ba05aeab50b-OSL\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Fri, 01 Jan 2020 00:00:00 GMT\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T11:15:02.142843Z","times_seen":15329183,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/profile/upload/avatar/2026/01/01/cat_pic_0184_20240626172201A028_20260101043124A028.jpg","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:06.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/profile/upload/avatar/2026/01/01/cat_pic_0184_20240626172201A028_20260101043124A028.jpg HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nCookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23455\r\npriority: u=4,i=?0\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 31 Dec 2025 20:31:24 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=172800\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b801ba8acf0dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23455,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=225, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=225], baseline, precision 8, 128x128, components 3","md5":"b89e7ff1b2d54b27c37b3a507dab7983","sha1":"05cfd0009312cdd8acdbd90c2c7c0dececc6a6c2","sha256":"beb60213a5b1359c5cae73fcf2ff667b35bcd2d39fba87360597596bb724685f","sha512":"fb0127a43e48f73dade9d654bb1f461b969be0f2cc51de907a69ec3abdabbca32a18a1f34bee28735532321b9340f55fc76c6c1c351cea67f628112800e6d2aa","ssdeep":"384:kPGJxkpE79uAQirT8CvPiLPGJxkpE79uAQirT8CBn9zYGVJPGJxkpE79uAQirT8T:DkpM5MMPhkpM5M+9ztckpM5MT","tlshash":"70b27d1533519c23e9d576b478d6e3a982219fe4bb8b1291bc8d740c3bb06e1cd2ce66","first_seen":"2025-11-12T00:44:58.321307Z","last_seen":"2026-03-03T03:43:04.261194Z","times_seen":17,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uapp.22xxbet.pro/pwa_api/app/manifest.webmanifest?start_url=https%3A%2F%2Fuapp.22xxbet.pro%2F1767213347%2Fstart_web.html%3ForderId%3D857465960765%26consumerId%3D103_b805f8593367062f434b52795e90d865%26souBx%3D171%26keyHit%3Dfalse%26promotion_id%3D29949%26pixel_id%3D277781858530317%26oneid%3D9c915813e77fb3c7bcd94f7347a52255%26tid%3D4944c6184faa0f438c9b01b130429d83%26advertId%3D587%26teBx%3D919%26returnFlag%3D1%26xjid%3D103%26click_id%3DXa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv%26xjk%3Dogp6lp%26slotId%3D103%26chTyB%3D147%26pdBx%3D26%26xjclid%3D857454280300\u0026linkId=29949\u0026v=1767418264252","fqdn":"uapp.22xxbet.pro","domain":"22xxbet.pro","tld":"pro"},"ip":{"addr":"172.66.166.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300","date":"2026-01-03T05:31:09.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uapp.22xxbet.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 19:22:10 GMT","end":"Tue, 31 Mar 2026 20:22:02 GMT"},"fingerprint":{"sha1":"66:62:62:C7:5F:15:75:17:ED:6C:D1:D5:10:D2:FB:A1:70:90:7D:A2","sha256":"03:40:79:3D:C2:F9:92:18:BC:5C:C4:2B:B2:E9:D3:9B:DD:31:2A:F7:67:D8:EC:DC:18:34:04:8F:9D:97:87:A6"}}},"request":{"raw":"GET /pwa_api/app/manifest.webmanifest?start_url=https%3A%2F%2Fuapp.22xxbet.pro%2F1767213347%2Fstart_web.html%3ForderId%3D857465960765%26consumerId%3D103_b805f8593367062f434b52795e90d865%26souBx%3D171%26keyHit%3Dfalse%26promotion_id%3D29949%26pixel_id%3D277781858530317%26oneid%3D9c915813e77fb3c7bcd94f7347a52255%26tid%3D4944c6184faa0f438c9b01b130429d83%26advertId%3D587%26teBx%3D919%26returnFlag%3D1%26xjid%3D103%26click_id%3DXa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv%26xjk%3Dogp6lp%26slotId%3D103%26chTyB%3D147%26pdBx%3D26%26xjclid%3D857454280300\u0026linkId=29949\u0026v=1767418264252 HTTP/1.1\r\nHost: uapp.22xxbet.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://uapp.22xxbet.pro/1767213347/tab.html?orderId=857465960765\u0026consumerId=103_b805f8593367062f434b52795e90d865\u0026souBx=171\u0026keyHit=false\u0026promotion_id=29949\u0026pixel_id=277781858530317\u0026oneid=9c915813e77fb3c7bcd94f7347a52255\u0026tid=4944c6184faa0f438c9b01b130429d83\u0026advertId=587\u0026teBx=919\u0026returnFlag=1\u0026xjid=103\u0026click_id=Xa0UOx_27uLSS6tubHvkVO8wjq-Ob_KeGnZiQjh6XYIBp4xYm6f8GTLbGL1Xyd59AvrJvp7jPlZSZeP91XZN7buI8MiPA7OpjhPmJ9BbY8SKAEl7f8JRJgwHXIkGCnJv\u0026xjk=ogp6lp\u0026slotId=103\u0026chTyB=147\u0026pdBx=26\u0026xjclid=857454280300\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=30159BE3D1A039CF3D2CED368D4D3956\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 05:31:09 GMT\r\ncontent-type: application/manifest+json;charset=utf-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Accept-Encoding, User-Agent\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b801bb6dd6cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2704,"size_decoded":0,"mime_type":"application/manifest+json; charset=utf-8","magic":"JSON text data","md5":"e827c03fb061d37658c6ef9f437abc34","sha1":"114f3da88e19164af41808bcaa2c488ee2af6c21","sha256":"7f07896186381bfe5d0492a820978be079062e0cebfe995d500ff0fc33ccfeac","sha512":"1f9ea96dc9343c39a6a4bd619e425d550e822758bd5f8b76831d5a014e9aaf3a29c153b50aad07e28975724cfc51aa2a2187819f84bec6687937737753e27e55","ssdeep":"","tlshash":"db510fa3c9f8493d3303969468c63a9fd0d7258bc9e8578dc4839c78d2a8b551b3723d","first_seen":"2026-01-03T05:31:32.585227Z","last_seen":"2026-01-03T05:31:32.585227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"uapp.22xxbet.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}