{"report_id":"d2fc809d-21b2-4110-bcc1-527359020d42","version":6,"status":"done","tags":[],"date":"2026-04-28T17:58:27Z","url":{"schema":"http","addr":"toto911mania.cyou","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"title":"Toto911 # Bandar Togel Resmi dan Situs Slot Terbesar","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"ddc30f9c70253f81747d30ce8e04d382","sha1":"890e18d0d97fec0df439447f7e0361e678a5f294","sha256":"5cffb7f1f6a7f83a3ec0e589030276918857fbbf54bbf34d5ca71b9dbd035f82","sha512":"2028cd7628027914f0b5df5b4c4c5784ba941c59d6f3be385b42eaf9aca62473ca9d9fbb41b5e0a27b3992c358019c4d8a9e86c9220c373251fb62b76d6e7700","ssdeep":"","tlshash":"c4e026ea5c7ac83865f4028a20f6e3dc166061a0b611d74442d8dc3baf20fe38ca695c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"toto911mania.cyou","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T17:58:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T17:58:05Z","timestamp":1777399085,"ip_dst":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":43972,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-04-28T17:58:05.161890+0000\",\"flow_id\":663744064345863,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":43972,\"dest_ip\":\"104.21.20.171\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"3open.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":911,\"bytes_toclient\":3515,\"start\":\"2026-04-28T17:58:05.153351+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"iframe15.otomatis.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-26T22:25:05.471148Z","alert_count":0,"request_count":1,"received_data":293,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-04-27T00:23:06.702997Z","alert_count":0,"request_count":2,"received_data":2093,"sent_data":857,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-26T22:44:19.904703Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.dmca.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-18","domain_rank":84234,"first_seen":"2012-06-18T23:24:47Z","last_seen":"2026-04-23T01:29:49.462355Z","alert_count":0,"request_count":2,"received_data":3960,"sent_data":936,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-26T22:34:03.62582Z","alert_count":0,"request_count":1,"received_data":103533,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"toto911mania.cyou","ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"domain_registered":"2026-04-25","domain_rank":0,"first_seen":"2026-04-28T17:58:31.462296Z","last_seen":"2026-04-28T17:58:31.462296Z","alert_count":0,"request_count":83,"received_data":1416055,"sent_data":78232,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":7,"received_data":807228,"sent_data":3367,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-04-27T14:30:23.799808Z","alert_count":0,"request_count":1,"received_data":104219,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"premicloud.net","ip":{"addr":"172.67.141.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-07","domain_rank":48055,"first_seen":"2025-04-16T14:37:33.865637Z","last_seen":"2026-04-23T06:40:30.600268Z","alert_count":0,"request_count":1,"received_data":96280,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"landingsplash.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-09","domain_rank":97769,"first_seen":"2016-04-22T01:18:08Z","last_seen":"2026-04-26T19:21:14.165642Z","alert_count":0,"request_count":2,"received_data":180447,"sent_data":932,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"3open.icu","ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":4853600,"first_seen":"2025-06-12T12:43:16.412054Z","last_seen":"2026-04-23T20:35:08.179233Z","alert_count":0,"request_count":14,"received_data":7957944,"sent_data":6293,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"iframe15.otomatis.vip","ip":{"addr":"104.20.41.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-04-30","domain_rank":92817,"first_seen":"2024-02-01T14:48:17Z","last_seen":"2026-04-28T00:49:37.435721Z","alert_count":2,"request_count":2,"received_data":29298,"sent_data":948,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":10,"received_data":324810,"sent_data":5499,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shareservice.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-07","domain_rank":67609,"first_seen":"2025-04-16T23:26:46.438114Z","last_seen":"2026-04-25T08:11:27.31729Z","alert_count":0,"request_count":2,"received_data":349332,"sent_data":947,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-04-28T03:10:46.276645Z","alert_count":0,"request_count":2,"received_data":7466,"sent_data":1217,"comment":"","tags":null,"fingerprints":null},{"fqdn":"object-d001-cloud.cloudstoragesharingservice.com","ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":197194,"first_seen":"2023-06-28T19:31:32Z","last_seen":"2026-04-23T14:43:06.796456Z","alert_count":0,"request_count":3,"received_data":245426,"sent_data":1503,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/appear/jquery.appear.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbd164d0b2001df2ba85327fc6bab39","sha1":"13e083d8852729d2e6cfa3fbcf3955a28275fd00","sha256":"5d19547b40e94ab90e831bec03fc23d4b894894bb93006b3b3fd8d62e2f355ca","sha512":"5e667b534b3c4cd17e92d4404055e434be7bd07544354a2a1ba56947468799525dd86226e0f1f9d0015421941dcea765c566c1d6a8eec4e1106f2e9bf2064f7d","ssdeep":"","tlshash":"6031ff6b31db3a9556fb703fb61f73155221853b0251e052d9fadd7c39b2d42b803a44","size":1552,"data":"","first_seen":"2023-03-07T01:10:45Z","last_seen":"2026-06-13T01:24:50.372147Z","times_seen":2394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"47c9907fc04f8b5936bc3af4232838d8","sha1":"7a7a38c25c44f51925ed47d650d9d179ac0cd7e8","sha256":"f1a4acc91d4855375f862960963bf744a92c31eecf0660ecec2a220391042514","sha512":"e7db4784c3187a9b79fcacfa16fa039fb847ae298d6b6dad63879d568ed2685ee688c4937c3a4784f48b33aa2b3689c04d3cad9e9556a3b162c2f6f1e3073cdc","ssdeep":"","tlshash":"a341ce4a2cb05058a35a93eda83b6491e379fd2dd28c401ac44cb5947ee06b9cfef474","size":2254,"data":"","first_seen":"2026-04-28T17:58:37.488039Z","last_seen":"2026-04-28T18:23:04.516868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"73777257453fa458639a6e14b97e365f","sha1":"80c5e3d536e625ca25f2846cdf55e0c398dd2373","sha256":"5e564a3e48567a89034cb6ea75bc0eaec7df2602bbbc9c3153450a4e082454fa","sha512":"ba577167c776bff063b7157315f225e407906fbd7559b787d213ea4dbb8eef461a8c0c1e269b976a7383b5f9aa9df95fc072bb127cc02402538fed2404467aec","ssdeep":"","tlshash":"39c02b3f948180834177709cc74b200c54039c37d002d40fff2c92401f1213b821028c","size":160,"data":"","first_seen":"2026-04-28T17:58:37.488824Z","last_seen":"2026-04-28T18:23:04.518162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/bootstrap/bootstrap.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d08775b7d337d5f37e3fb102f1a8a913","sha1":"6cbd6f79def44d7e96d933a17967cd2afcf9ba3c","sha256":"8ae9a41def07afb4166b08e3143071437d1867e5f26e6bd907899a8b50bbafbb","sha512":"458415d96f8a83f130fdae57e3322c75b67269f4eb57494074e06b757eced0730c58ca73a8c65148c19b9126653ddcf66e3058426b921e1bd51c3b7369a5f05e","ssdeep":"768:poBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:qAr2MRCqc","tlshash":"b7e27446b230316107dfb2e5515f020b723a6a6dea06907c38b999f53db9c48727bf39","size":31650,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.289888Z","times_seen":2510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/text-rotator/jquery.simple-text-rotator.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9964685a5509aabd8ab04dc6257d97f5","sha1":"927c58db28fb33c328a5a0bab4f9e3a93555f651","sha256":"95df7f4d192968c5c68e43a936016ad025fac7ce02a221a1bf13be6592667c30","sha512":"f58116f313f5d862f6f561383d60e0cef0056bb77013b9060b60e3a2a225fb2d55cb5691da77b5cd76ca10f71929f1697b267bde4ee489352efa3475f58ed279","ssdeep":"","tlshash":"d171e34a68fb48bdce3a91eb83ee1f56247909b28c006441139b5b7e08f19456bdde63","size":3568,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-13T01:24:50.414066Z","times_seen":2161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"39f9dff5008c206d3858162ab4623196","sha1":"70decd3cfc207e97071665c8f525482e2b175cfb","sha256":"7d6e824db43a4aaa95bf75b81bf5f3761429a54b972c48dcc555d1a6383062c4","sha512":"e8c554dfb683d4d3e9fa1691656c2a75960bf7b0f972551a2913ae0a9fb2394a213fb7e170792ddffd868350e323c31865d27a6f7f9e12d779d0e9263f32f6a3","ssdeep":"","tlshash":"2901d089bc467076ab96326c713bfa0751631225684468335dfec7bbef32e9b410368c","size":747,"data":"","first_seen":"2026-04-28T17:58:37.489699Z","last_seen":"2026-04-28T18:23:04.519315Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5c01714484fbf19856fc5f205e463e","sha1":"f3057884e9bdac343c71682dbb26e25e38de579d","sha256":"398ab2fd9bf41f6e5ee7be12052815b5b84b7768f1387e1222475734bade39b0","sha512":"d265780554422bb440eb550c9cdc6102d7ac7ba1145231dc993019ce153de0ca847cc8cd8c509f0a6be2a965ffa007b32a1f4b24a9b99d8f0b0740e4cedadf1f","ssdeep":"","tlshash":"70e08cae90e218618ebe732e6f0780e0b1300be30048d0c1764c5dc09fc013342b1fe4","size":401,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-05-20T16:46:01.213876Z","times_seen":1934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad7362e938df1c3dcfa13e3908a6a2bb","sha1":"b019e82e59ca4c2655c5ba4268f3086685532fd1","sha256":"7299f2b20c82e43958b6ba588729b3a8b6999feb6b6f4ce683fbeadd446c2bb1","sha512":"3c1b9a30b9f18ba38d45b64270cdb148f47d51bad31dca8a3966aa1f20ea21995528e12b8d6060f76b206c5532003247a534d1f946af6fbb864aa8a0bc894c5c","ssdeep":"192:aoxARFx6JLOfqtQWNEDRlmhdOX37Ho0FN+6ixBKAWsRb8qRZOIs/3sllbn83750s:JyV6VOfqtQWaDLv7WDfuQ4f7hg3G","tlshash":"fc523499361087df1342af3a7f376948e16b8c81c94058def098ec096ec972dc5fa679","size":13919,"data":"","first_seen":"2026-03-04T11:21:36.405174Z","last_seen":"2026-04-29T21:29:37.480131Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/vbulletin_md5.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","size":5689,"data":"","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-06-13T01:24:50.317211Z","times_seen":2214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-06-13T03:30:18.357117Z","times_seen":15124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/jquery-2.2.4.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b354cc9d56a1da6b0c77604d1b153850","sha1":"a3d8479f4d4e39b131bc9a53bbf53d1fbaa23732","sha256":"fdce77a6d0053f32d231518a84a71bcab5c86045ed52369da00b89d4284aef46","sha512":"b6dcbe11a0f90ef61a071fdf7d8c637f95fc77969cffda9f291772b4fa2c2f9020eea2916da6f1113d746afeafbf592d0db79fb2f2f5400bc0a0fc10a066ba98","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a98Q:v4J+OlfOhWppCW6G9a98HrU","tlshash":"1783c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85577,"data":"","first_seen":"2023-03-07T01:06:18Z","last_seen":"2026-06-13T03:30:02.406011Z","times_seen":8527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"47c9907fc04f8b5936bc3af4232838d8","sha1":"7a7a38c25c44f51925ed47d650d9d179ac0cd7e8","sha256":"f1a4acc91d4855375f862960963bf744a92c31eecf0660ecec2a220391042514","sha512":"e7db4784c3187a9b79fcacfa16fa039fb847ae298d6b6dad63879d568ed2685ee688c4937c3a4784f48b33aa2b3689c04d3cad9e9556a3b162c2f6f1e3073cdc","ssdeep":"","tlshash":"a341ce4a2cb05058a35a93eda83b6491e379fd2dd28c401ac44cb5947ee06b9cfef474","size":2254,"data":"","first_seen":"2026-04-28T17:58:37.488039Z","last_seen":"2026-04-28T18:23:04.516868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"129f5fd162665cd0abc0f39fea8c9e8f","sha1":"253c21387dc8055cee42777276f455c7794de3cf","sha256":"a6336811b695da7dff581c054bbcb90502e899d034ec0f26005f91236c3817b1","sha512":"c6017466dbe4147b237b174c099b386869ee7adf1c41bb7a46df29febd2ae551d7059c590b4cdd76248b7414262ce0c856deeb174e6ccdc8a45dc9d820d505a0","ssdeep":"384:jpWcj41o2t8Z75jf5E1vcNTTCD2c5cDgk:NWcj41m7av8fCD2wk","tlshash":"d0b2a5523250233482e332fe55af510d763afb74ad428169b06285eb366754ed273f3e","size":24154,"data":"","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-06-13T01:24:50.481932Z","times_seen":4660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/jquery.cycle2.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3981c014980610a347911b3eb292b722","sha1":"a19a589bbf0d0a607557cc93768fa68ec4d9b87e","sha256":"6b41e47a54aefc08aaa3678ed56f5689ddf69b8e8a48e9af8acc200ed0559fec","sha512":"a1e7501a56f8eb568e1c954104a2e0c382d2cbf9ffe386d1ff47374460156e1813374c69250ea17d5fd9f2c8d9d8734504c8782ca09af0b503d69efda13479e2","ssdeep":"384:dKoMqqIIaGwjZufVdJHqktq+3XlTXdE4VzExmRCqfL:PqXysVdJKkNTVCmP","tlshash":"3fa2b728b249396295f328f8733fd00b17f12d776950d6a170e2c7c96e74946b226bf8","size":22288,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.457993Z","times_seen":2382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/tweet-js/jquery.tweet.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6d5a5f7a0d7af2a2c63b97919cac65a","sha1":"1f61ee273e334ebd7388e219157bf8654482f009","sha256":"431cff4d223f3296f7d4b543573271745a91d9069a3666844fb3b037aad844c7","sha512":"a8b64bfe5a39d6b58e1d5b9d1864ffb0e87be8e164a0cf71a39fcbad5c4a81fb4ad400dc6416e6a970265d3804954809949678bcc639fb10f763767777ac6922","ssdeep":"192:7IXczrVLA8Tmk+a5m21yVTp5Czsa5qdmzVQjBIxbFDyZ1ewMOVrkxmtUtkwR:PAOjXsa5wmiP1utkwR","tlshash":"63029370f196503b0ae32272b91b6390b73dca4bc5d5dd53c37594482fa5f96a232ac3","size":8209,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.31576Z","times_seen":2402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad3201e37a71a4b003957255c3a6d422","sha1":"89e093391eca7b870c732414d5c1b67f00ba07bf","sha256":"0b1d70491e41ac3842eeddd71540cad55927ecf11a0a1b560e1ade80c349bb6f","sha512":"c9d62d2e294516f7eea3bb688ca31bd5aab99e0474984865c4f28d0eb1f12b5c6cbc9732476b0f42f18e44b61786e999036d2edcb79140f25847da288abcf1cc","ssdeep":"","tlshash":"5ce0df36b6ec18b20123e1d12137b716aa00a45ede431625f98c86c04726bb0520218c","size":335,"data":"","first_seen":"2026-04-28T17:58:37.492077Z","last_seen":"2026-04-28T18:23:04.520825Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ad6e4410640c0bb9f36ba715f33ff78","sha1":"fb3ab3d41903481d577425ef5ef3afc3563808a4","sha256":"dfbe3bbaf4928d1b9687ef14ba958e1992fd9a836b9e88eed717d9085d15270d","sha512":"4b4640af3cc3652bcbf32a66a9bc1207f67526188f27e1410d35c7bd348245f4bb19500928784fb89f275e268a3b749b7bc12b61aea866247b66cc2ffe82d91d","ssdeep":"","tlshash":"83513021f586aa473237d0c2e13267ca6507021fca036b1df7be56ca6fc85adb41668d","size":2782,"data":"","first_seen":"2026-04-28T17:58:37.492989Z","last_seen":"2026-04-28T18:23:04.521388Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c8f6a93ddc06cbb6a42ec38331973be","sha1":"5dd700528798a5b959db0a2f38380528ab95e613","sha256":"7f005a2275956921af4dd6ea7baba950fce85147fc084238610e9afac95c3f6c","sha512":"4c88a46a8f0cf8bbde579c5f9d8b8acccc0bf5e29ef5297dd6e5f8814b7b6f7a16d1ec5bc917e79615fc1d506850e819b103b479b9e33090d16b7f64648ff687","ssdeep":"192:W0fWnEh03uR/eI/U0TQhTESplGjfz1452o:VfTh03GQpXky","tlshash":"6802748aba910154f527296cf337b7d9ba298217d00ade74bc6debb48fc84301136b4d","size":8869,"data":"","first_seen":"2026-04-28T17:58:37.493872Z","last_seen":"2026-04-28T18:23:04.521961Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f0b0c65978988786b0cf8f876afa4cd","sha1":"1b47da92bc8e56243f906983909ac5e9f64c7b7c","sha256":"d6b6a7dff61460b10509ff094804760f677f58798ce8a38b4f7179fa46ead98e","sha512":"316c16f89777e36b925754f1dc8f4e0b45ef493cf1a936abe72f83cf46cb995c0bcc623b8bf9e446133f1298594bc8a7e2b1959a0083cf1fb0d2bcdac5fcf1e1","ssdeep":"","tlshash":"3cd02b18edf010035b3f488c262e73c6a6d0002bcd07cd003bfcc5c44fa7c149206558","size":267,"data":"","first_seen":"2026-04-28T17:58:37.497395Z","last_seen":"2026-04-28T18:23:04.522602Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=14255541\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Ftoto911mania.cyou%2F\u0026channel_type=code\u0026jsonp=__gi7omvgep26","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3876c518b1422104bccc38443cb91fd8","sha1":"9700c8fb1e00580d0f7c2668483715ea14d7b618","sha256":"9eff3c7e4a053e53065975d4f0bd5602b1bca994a03a0c531f4035999c7cb1db","sha512":"bf263957910fa957f278403dfdc19849f107102d17969f8f5157343ecc9eac8896e0ada74a2c6349ec8caf7445bf3d0d6233d1a7eeff3a2ef0aaa4994eefcc81","ssdeep":"","tlshash":"2ae0682fa2059d318ac0e7e98900ba41ee340762a64628fdb4ad1332921f39e833150b","size":390,"data":"","first_seen":"2026-04-28T17:58:37.481604Z","last_seen":"2026-04-28T17:58:37.481604Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/jflickrfeed/jflickrfeed.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"847c6b884e569004695666dd6e90fd0d","sha1":"0f83977484c914c85ba813adb9c46506baf4a83a","sha256":"796951855984fed308feec350d31ea2ac1382b2c6aec06412f9c33e1c13fe075","sha512":"1dd14e40e94dde8ab70b5d2e0293cda5f91376703dcc2d2a4b3174ffe270663a0448377c7b8334f2195222e8e3bad39d58e27314f4a59b077a26b8085bed450f","ssdeep":"","tlshash":"623122005c51a1fe16ebb7766d9f13380f318301c868ea52a7e6c171687b1cbe573d40","size":1462,"data":"","first_seen":"2023-03-08T15:52:17Z","last_seen":"2026-06-13T01:24:50.320175Z","times_seen":2167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf885b9d7551ad0327b3b600aff92777","sha1":"30bb46f2663680de7dc51756a2c8b8186bf92135","sha256":"04bd115fa643878c538ffdcaf5452abfc4c42fa46be230c8bc837d8e3bddf94e","sha512":"16e53b38c38f40955d37ea3c14329a1e40a9c57de27764a62e05363a6161c43cc4e71e583fca73116aba5210932d1ed11bdf8b8b2ef759e019d9a7b215ba3828","ssdeep":"","tlshash":"59018b778943007c4236eae3f3f962342485526792439c0b797c15675fc8d5c19a0d7d","size":674,"data":"","first_seen":"2026-04-28T17:58:37.498243Z","last_seen":"2026-04-28T18:23:04.523129Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad7362e938df1c3dcfa13e3908a6a2bb","sha1":"b019e82e59ca4c2655c5ba4268f3086685532fd1","sha256":"7299f2b20c82e43958b6ba588729b3a8b6999feb6b6f4ce683fbeadd446c2bb1","sha512":"3c1b9a30b9f18ba38d45b64270cdb148f47d51bad31dca8a3966aa1f20ea21995528e12b8d6060f76b206c5532003247a534d1f946af6fbb864aa8a0bc894c5c","ssdeep":"192:aoxARFx6JLOfqtQWNEDRlmhdOX37Ho0FN+6ixBKAWsRb8qRZOIs/3sllbn83750s:JyV6VOfqtQWaDLv7WDfuQ4f7hg3G","tlshash":"fc523499361087df1342af3a7f376948e16b8c81c94058def098ec096ec972dc5fa679","size":13919,"data":"","first_seen":"2026-03-04T11:21:36.405174Z","last_seen":"2026-04-29T21:29:37.480131Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/owl-carousel/owl.carousel.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fec2de7cc7d2d9a66130311f52b5db8","sha1":"5cfc389925bd8200ee1e0fb224434ded9cae3f15","sha256":"4b18105a346260a3e8359cd02633fd5f8bb244f2d5f43e4375a1efd10e5c865a","sha512":"2c65ad232d52605402fe3c61104ca6e19be96dd89eb072e8554c3019b549c1af260a6fd16ab7c007b4ddc24e9c0bec770aba5cc4d1cff2fb7a9a241699d8a04c","ssdeep":"384:XWxb9XXAhOfMSelTARgzoSC0Z4eAchzD/DM5F:8b9uTARgz5C0ZVDL2","tlshash":"1962183a2152321653b261af157c818213e548023ec7b464f9e6f8edebb6161117bbff","size":14916,"data":"","first_seen":"2023-03-07T01:34:34Z","last_seen":"2026-06-13T01:24:50.29937Z","times_seen":3711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"116ee830ddf643f1a5477c4be45ce754","sha1":"497c37569bd8eba82d7912da655e657b92285c7e","sha256":"3eda25c4a367c1a2313163eba6c9a192e98d34aa4e9406ba4b24aa2d388d447e","sha512":"12c2fdf2dff95c00c8afdd8589277aa18cb60a940923be3b42bb4f385825f5ba35c46941a4af297150903cb7b1da3955aa9aad3d9c7de16ad0a004bc1fe515e1","ssdeep":"","tlshash":"0a017d04a9da13861b7730fc1befe710a65b641b1009ce40fe9ef9c05f85d269f27a48","size":763,"data":"","first_seen":"2026-04-28T17:58:37.499009Z","last_seen":"2026-04-28T18:23:04.52364Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-13T03:19:04.216518Z","times_seen":78121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d47b9983f64f4b302ee32bc3ec3c2ea5","sha1":"eb56f51c1f28dcb7667ad72e30c9a931e2368abe","sha256":"cac3fe381cd730ebf0fb8aae7301ed425a222793114887f7765e838906d8b2ab","sha512":"c678ca1f8f79889d49f79145e8101c0aa7db93ac566e24c91c8eb269670772b5c1350f747d2c7a470af862aa72d3a4dc747c7d740de90c6f0ea3987ddd063058","ssdeep":"","tlshash":"a321336198e111320206e0f4978b33e93dbc5007e501cc253d6d6be51f9ed91459be6b","size":1294,"data":"","first_seen":"2026-04-28T17:58:37.500043Z","last_seen":"2026-04-28T18:23:04.524762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8f159acd63781cc6ac980d407b61724","sha1":"af75e9cf9e687be06380ec60d1f95fe26b6917a9","sha256":"61f1d3bb3128667300162eec6e2ada3cad475a6a1c1568e3868463d31b8a0cf3","sha512":"5e23d0f90fb6872e42cd62575815892d32f312057198380a63b876aa9a6c04f421ac34b470148c36fad9a4a59810c4d42001b247f71f7824ded9403410d83137","ssdeep":"384:mcApBt0GmR4eYrPuS7p7dXVD046JELBlPhqU7iXUvIk26XfL4492R:XApBt0ncTuSd5XRsJml7X86XT44s","tlshash":"edb2b6ec77c6b75987718339109b78c655baad87202e08b4c210e8b4fc79f6c557b8e8","size":24205,"data":"","first_seen":"2026-04-28T17:21:09.002768Z","last_seen":"2026-04-28T17:58:37.411575Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=04fe8641-1c1d-4522-b9bc-90ca8ca0611c\u0026version=1600.0.1.117.81.321.32.1.3.48.3.28.12\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"056796a49539bf22c7f22abdb04bc884","sha1":"1a1e7a162b61373524887c379d4a97d91a1a2cf9","sha256":"5a8b8636536af83115f52220f4ef45e17deb6ffca13ce6741831f7f4662a806c","sha512":"13536928c4fe4d1612542be7e41778e0c4f82369cd257efc4a630e9a0ba62ffc7b9203c114848482a019bb36c71566d01e3b1b76a62519cbd1f68ff2d13c15be","ssdeep":"192:LGsXGAqGwGaVhZaDxVQOieFxVvNfmaxb2:LGsXGAqGwGaVh4Dx1ieFxffmaxy","tlshash":"70d1442a835fc8bbb377928a63cb770a3408507971f85d7fe464cb70a1861d7d211daa","size":6419,"data":"","first_seen":"2026-04-28T17:58:37.41516Z","last_seen":"2026-04-28T18:23:04.466087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"8060c88703e549ec47866c0672c54154","sha1":"61282e9efaebd8845a74d7f81f51b67e4546f3c1","sha256":"2231caea26eec84035ad3ed7f9415596b4db272a82de4f7418a0a656a1eecf9e","sha512":"ee5a3859bf4084125345675afe82a2c18c5f7a3ab997e3fe4e5a0956b70d0de94c5db9509d5d09722baf72c432abd042e36aac043ac52191a6a8f38fe10daf11","ssdeep":"","tlshash":"0921e114d9732530192360a95bdb9a813db0200b3b02c89abf8dd2472f4d96fd6f27ed","size":1398,"data":"","first_seen":"2026-04-28T17:58:37.501361Z","last_seen":"2026-04-28T18:23:04.525267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4375703731e48af980d5ca7fb126e59","sha1":"06d9c216988abf39581a502084ec0c6d74693541","sha256":"5e764cbdfd6a68193828d66f70f237a140667f472d375e786f58b45afd7ef97d","sha512":"c090c9e7805aabbf4c4a1aef0fb9a3a6ae0bd4323c409c319bbbdd0df080ff44c9642bbc01e201fd34d6ab254cb704284990c59970e804cc8ee9d09fd4b4811b","ssdeep":"","tlshash":"57f09e3405a700719a23246adf9a6044f070503b7c88d61dbc9e40ce6fc557d67f23a8","size":597,"data":"","first_seen":"2026-04-28T17:58:37.502325Z","last_seen":"2026-04-28T18:23:04.525869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/14255541/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-06-13T03:37:31.405265Z","times_seen":27989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"74d97cec53f4863f12fef290b8e2534b","sha1":"2f6b355361c7499402f6f146c4e117cac05bc304","sha256":"42224e86bac5a26ac60a74cd721c1c1d9d58a42365e83c9a8a6f8d727373fdf1","sha512":"d27cd01ce03d36b6a438a608d0a379ac99c258f03722cd7246320114d61b02495b6dd19ac48003c7ec77f85c3f171cbf591b0bf63d26be6c9be9dcbed6ae4837","ssdeep":"","tlshash":"62e02b3f147121310537a46da90f6f8716a261136047cc023d0cc4468fc8e201cf9aa5","size":309,"data":"","first_seen":"2026-04-28T17:58:37.503709Z","last_seen":"2026-04-28T18:23:04.526323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"c098c633452220618bbf4547fb980e25","sha1":"8ae72d611e6cd18445128b572d93b4d4e5a815e1","sha256":"e8b5182689d74f7d216c7262de67de7035e1a18d51e3f1f7f02535d8e4a82cb3","sha512":"288d70739b0ff882f3b0a8ce69561fd8188d1be0c24f6922054324edee065c1bd206f3def6d54183ce1b25fefe8cc8d0ad997173540dabf56d700c0855e3be1e","ssdeep":"","tlshash":"8a11802e2165097a8927b65f539afd04685110170407ce017eedca5b7fb9e380872ed5","size":987,"data":"","first_seen":"2026-04-28T17:58:37.504567Z","last_seen":"2026-04-28T18:23:04.5271Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf02d35dd1ea80e253e75ceca01fcaf0","sha1":"7bf42dc3d412ac8db23a6c7cdf739ff6e3ed5606","sha256":"5b7ba36c2f2035c01569234a1d99a5db7ed7f935919825cd3a1ea155a1d8e24d","sha512":"8b1902f73e1f2c8987f9fe520d156bc8923fbf3767bf84cb776daae05640795f3ab785252a2bc79eac3d0a2c7ca200aa98f49eec0a1b60c81d869287ddcfee1a","ssdeep":"","tlshash":"09f0971d1eab8cb252fb6567ab7ff24c306631574051e4213d8ecec48f20aa79a65ec4","size":569,"data":"","first_seen":"2026-04-28T17:58:37.505398Z","last_seen":"2026-04-28T18:23:04.530192Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"60a8ae632b063b9cf7bc0ae213ba6ac5","sha1":"fe6563e4b808b6971ee758e96b078403b096be9e","sha256":"589e61231813112d8602f7784cfe1061a544b1476ab681e8ab52f635290f1d8e","sha512":"3d60328c08001a85f126a2022b36a18598dbf457ce9f89d3a3355be46406fede6ad5103c32074733ca93fde2b00f82327a49a60481bb90e5dce84cbeae31df0d","ssdeep":"192:3XmLAZsQi18MWZIawTI4hYYwTnfBgah154KdQRw9HzE+Mq8bgyxD1gxLTkobgPmj:3JZORTImnwbZgavF8EAc8ITkXm1m4t9d","tlshash":"4762b5226e89300d106216d6b0c6db823a9c536377015b77bb6c8f70af892760eb77dd","size":15912,"data":"","first_seen":"2026-04-28T17:58:37.506184Z","last_seen":"2026-04-28T18:23:04.53075Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/custom/floating_icons.min.js?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1f9706eeee7690ce0fb65264290a61d","sha1":"f47499adeca0a42d73894a8424a5dc65e1c8cde4","sha256":"afbf313c9cd8546932da922fcd36f00f9e0787370ac0d46ca82d3cb31d15d0ea","sha512":"99830735da3f51fcb6510a5f682638c2ded1a875790cdc5ed9eb928decf8d744a48e107d92af6db421b666a86cc88542c187c2d2a0c86535937143bbe898e15a","ssdeep":"","tlshash":"0f2186a083a6d43d83809166c37493097854302efe529640fdfc8a8b1ba9d4c6c23efa","size":1172,"data":"","first_seen":"2025-03-20T08:45:19.929797Z","last_seen":"2026-05-22T02:08:47.27492Z","times_seen":1766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/parallax/jquery.parallax-1.1.3.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1508097fb2657eab7e68bd385cfbdbb1","sha1":"c65b4cb7750055e01101a4edb2f7d2d749e85174","sha256":"ba75543913b3258b7a19cdea608c7cc47322898d244b40b6190c970be2d3a2fd","sha512":"fb2b63f3aa3e83603dd8ac3211bd4624c00a0f534935dda13ad959121608d3bd7e3d5fa284c470692a9c57129ee665cc4a39bc4697d09c45841f506d9f5a7db1","ssdeep":"","tlshash":"0f115b38bb107255c96a762f0b3be309b21736415c028124d229e5dc6ea9a5bf86ac68","size":941,"data":"","first_seen":"2023-03-08T09:00:45Z","last_seen":"2026-06-13T01:24:50.422119Z","times_seen":2198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/nivo-lightbox/nivo-lightbox.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5896459ad6790d1d94eb2180e59e965","sha1":"e5d4b0ef3a929aa6e20ede86b024264a8cf2b473","sha256":"65723a3f6bf46e95bd82bbbc3f986c0df44ad1b4427abbc3fa252a53ff40b4ea","sha512":"de291f580572eacf236b4b7a51824e06cabce1f0544a5e2c7edd60f5cc2716757eee71069a1dccc42037d1704e4433e732469c46b74ea690911010cc6e1f50b4","ssdeep":"96:RwsLo8zljjmeC8CVZfOTfqjf61R9WTE6F67A6f8r6Fk4zzdtMTnO:RwSPNPcfOTfY61zWAAS8r6TBtMTO","tlshash":"57e1420db351525046ef3567211ad334276a86ab8c41e0b6b36cc4d7a7ebf181d33e6d","size":7420,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.334902Z","times_seen":2402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a6afaf7b25a935b2824f7f0ec892773","sha1":"1674956472b8fc0458c2ecf8d5282eb4d3ec0b88","sha256":"1bc3650eb5d2447ad49a93d57bdc3a792dfe71da316091f6440ed4970dd93fa4","sha512":"5901f4c03b215e66376cf7af96781b2c50d235445c30b490606a8ebfcef00a8c85f16ccc4bc3eeac62bdf88e74014079721cb249564242cdd4e182493489eb4c","ssdeep":"96:7ax/jJSyB/Bk/BnJQmgOSrzBd7pB3eMDcVtRQoGw44MjyJBJkwB/aktoX7OaRagL:7gjJS2/sscQol8k/ayoX7TagwEMYSc","tlshash":"57d1912999732237093351e68bcf7241f92811532941cc1a7f5c9b9a2fdc52e2bb1ef9","size":6719,"data":"","first_seen":"2026-04-28T17:58:37.507249Z","last_seen":"2026-04-28T18:23:04.531249Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/skrollr/skrollr.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d6ae9201bf4c1d83ebcacc6da3ec09b","sha1":"65b20f0c1dba10c7ba3d644fba7ae80ae08d4ced","sha256":"911dccc7a59863b46d628fdac57d96a7cbf72325fe2555d2a3d165c6258d3464","sha512":"023903172cf7ec0d5fb06f0ed9dbe90146ff5b2ddb8bf5db81f9587078d28d2c9cd22808acee7253eecb779142e92e3b708a2b167a7dddf93ae26cd92bb5c6c6","ssdeep":"384:r/UqdA5yNpXXTLLeT5RyFNPsJ1S+Cmna5WbYBQeU/pBr:r7o6TLLeT5kXk13Bbt/pF","tlshash":"a44209ceb549b47043c375e6c10f5249b236589de8088465ff25dcdbac38c7a01abf6a","size":12360,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.304673Z","times_seen":2403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/jquery.fixedheadertable.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"406edd97a8850446d2693ef306af0708","sha1":"bd4996afdab1f18893ef89c3281c55e6585f334e","sha256":"991994866beb5e90d2205f4c5d4a757ddd38c6399386335991b260a89d857fa1","sha512":"493f04e96c9ead6dd640cc2a8c53e4aa3b43171c7dd51a4eabfce9fbcf00c51fd9d2edb1be40e6dac6ab6f3850b53234f177bd232404ce70ff287c11735f7d8c","ssdeep":"192:J/PBMlQxEuOaOGWzw32xilOXrPN7pOIN+5Mfj9SPHwjwTuv0vS2QeON:JBMlQxEuOaOGWzGEZrPNdh05NPw+S2sN","tlshash":"9b227195b3f93192c5fb61ba59fe014db0214d37a74b44b0b1aec1b81e70d8d22b9e2d","size":10635,"data":"","first_seen":"2023-03-07T23:34:28Z","last_seen":"2026-06-13T01:24:50.34762Z","times_seen":2165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"15d3adb70f206f70e8676612cf1bcd06","sha1":"7d3bf3fa3e21e8fd36585901130714497e7bed20","sha256":"d29445e7ff17620113f644598826c7c3ddaaab631f9368add696a55e7c5a0b84","sha512":"cdda6a42b5f99b306952cb81b097712f8a32a48bc2ac6a79e6e1940f02e1d8f9f233bcbde623263db80cef1c89b4d5a53fc2fb2866439648fb3142e63d81bd30","ssdeep":"","tlshash":"1521c91d0b1e283885e7b13f568fe65a3832839308088cc0ba5e5ee04f2866c1d83fdc","size":1114,"data":"","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-06-07T01:39:41.692924Z","times_seen":1738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0487511010bd01d94ff9df609ef1ed60","sha1":"bde9b1e9825cea356b368b82386df73ba3714a06","sha256":"b26afa46f8e5efb3e60be7a5a4abbdf6470c8bf8ab90041b93670892bc1fbd5d","sha512":"d0881ca8f8b0094b43fb55cb916907c565aaf98675df63a2b0c7ea3f245198e61fd50a9387f48a9224c1395428ac84f5ac92ce1bf1b57c28a80d8a9bdd734317","ssdeep":"1536:E5CBuRri7jvzYY0WRcjbueuj4LzBpL2XQmwpYU9BfIU505CG1A:EoBuRu7Tubduj4ppjF50Bq","tlshash":"55a349d67282b03493f786e7a07f6212b7391918740d8420f17ced6a396a987d177f2e","size":103475,"data":"","first_seen":"2026-04-28T11:41:36.247882Z","last_seen":"2026-04-29T07:21:21.473009Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/frontend/desktop/template_v1/before/index.js?v=zeb3as38jmmuznyrdtuz","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e5ce401fa29e20cf8f52e5d754a5d5a","sha1":"b55566fc452442bfffc73943eea5177ccd00fcac","sha256":"7f1d23659e76eca87d310351b7598a64201f99a8be2a947319f0182cdc3b0cd2","sha512":"e4ac4422d6aeee85a36002a6ca346faad7e1de6510ed0253b2130dfefba2bf6d3e186a0907af294df5d71118a002f6dfc6cc9f2e4e9eef40ce374fed672bcfd5","ssdeep":"192:ATn2PoqeRfRll0OR4HCcbNQNJ/OhxwBZcAoL/3eqnhqgSt081qq44WIzEtMyCGWV:YpqEPRfeIJWhDAoSD3t0mlxWeyOfOydJ","tlshash":"3c4294c8b6c6f47503d36670902f1106f23a6919b51d9480f72de9d2be7884ea237fb9","size":12408,"data":"","first_seen":"2025-04-15T10:15:48.992845Z","last_seen":"2026-06-13T01:24:50.348264Z","times_seen":1847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/liScroller/jquery.li-scroller.1.0.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"097d12ca6affd5151d1d56db876cc1e0","sha1":"4f1b6d162e327a5e8d0f37897d4d559dbc265ba7","sha256":"e00749ed99da6de8ee85c1fa969a7571feaba5a506c1dd88be8a12e20ed680d9","sha512":"fd4f03f1ba6fddb3bba25d32d09e9713d08b55fbd11330d43e74dd874646d01a27eb6dc19a49889cea10a09300adfaf1ee0a11921d6858255f31893fa8d8fdb2","ssdeep":"","tlshash":"05119e08eb0611bf0ce5e738fe3f9b1c75f315134222d5a495fae4541d814bb5270959","size":1002,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-13T01:24:50.300062Z","times_seen":2158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/auth/login.js?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a4b15ed3f06513dae99cc4235a6ec08","sha1":"cb40060815eb3dbf9447f934cadd04bcb859474d","sha256":"4d83408d7af18fde2333ba7cb69812fcbe1a7ee412514d12f51edc5055a03e08","sha512":"a052e76051b1e017563a96a5ee7f9fa80e86055cf81895cd0097321e076514075399ec1a6d2ebef927c124bafb647c34dd21eb38b596b9c842a6d695ccf76962","ssdeep":"1536:pJbZ8DgaIucWkVQfRVeiLxHg1SFkQr+X5grRaL8sMw+pN:pJzWkVaVeiRg1SFk6Hr8L8j","tlshash":"cab38b84b182743757eb44a960aad208f2655405fc234c54f72cc9d19fabd8fa1b3fba","size":108139,"data":"","first_seen":"2025-12-18T02:47:54.07807Z","last_seen":"2026-06-13T01:24:50.479257Z","times_seen":740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/custom/quick_menus.min.js?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7317959829252a5b6ec0bfa7e8fd1cd7","sha1":"adeea8e64f82c0c5bf31cae7573fb2da2dd9379f","sha256":"a1dd4aeb77f3316b4e815fa2bc28fe65dd008f74e59cd6b3f2ed9f179874bdc1","sha512":"c8598cd7dab477a0e712a6b0b8aa87e901db9c9a46beee7c7657091d453e88cbac6b1c8e8da419de697208aa3c35bc9376205200b955a86a884b7c02bade5641","ssdeep":"192:nBggLQBa/19nBvb0ywD5UAL5H+L6FNrn5IAgyJP/:nhoBNrn6pyd","tlshash":"7c22735b3ed200355a0baf9d67f98746376c7580c932c2793fcc520b5349da9c9a1bac","size":10588,"data":"","first_seen":"2026-01-21T20:11:17.205842Z","last_seen":"2026-06-13T01:24:50.474166Z","times_seen":661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54cdb604e88d3093ff6309ffdff93a6a","sha1":"fb023b1b8b3dd5c3a5822d56c63119d19faa0c14","sha256":"9fe1425df909edc1264eaabb2746b21fcdc05f124e1e45515031a19e7a97baef","sha512":"8c6561814787a33709425d92d78fcb4300755e8b9b7bf0b061e3a6724586ab67fe94739ad1e71864e857aba873985f41d49784eb4f739c4018a3c84dca9ba78c","ssdeep":"","tlshash":"60e0202a50f18652967640cbf4175155f451013e540cd940d1c8cc7fad68c9530fa754","size":356,"data":"","first_seen":"2025-04-08T04:25:33.720822Z","last_seen":"2026-06-13T01:24:50.473646Z","times_seen":1040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"3affa54deebb4a2c2f7723cee815c033","sha1":"eac74b71430a42765d2cfb58063f6c4def218fac","sha256":"f60c41a4e6b8ce270fcbab83d058cab55083ec575314bb43b9429e575bc13a6d","sha512":"90c02be767bc8ff7da5d97b8a9303f297008bc8072c1171c57b1b9e66f16c87d1e49311ed96a1dbc83553f2dd7a39393476d45679b7f5ab1e8f027244004eebc","ssdeep":"","tlshash":"f8e0557bd8a39487907ba42bc74b360c2921d913a002c406fe9ca2a03f0413fe935fcc","size":435,"data":"","first_seen":"2026-04-28T17:58:37.50899Z","last_seen":"2026-04-28T18:23:04.532428Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/vbulletin_md5.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","size":5689,"data":"","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-06-13T01:24:50.317211Z","times_seen":2214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"67d1f42c629915b9516cff27ebb5b7ae","sha1":"aec077f3cb246ca09e57bb44260a633cac9e9a59","sha256":"6784d889ec0c79dd1da26f6e74862b86e0a093e8e40d5654ae4a89db637b41b4","sha512":"4209d9766e87f8ebb24b1559a8ae11316f32b02b40453dd231b0e4f2683df27a1e7fea42518def8c6fb13351f081b2505766693e4ad55e6b58d49a9c6c75bedb","ssdeep":"","tlshash":"7ad02399587a853462e8014a10b7e3e8266020d07711d34181dccc2f7f31dd35cf556c","size":217,"data":"","first_seen":"2026-04-28T17:58:37.509866Z","last_seen":"2026-04-28T17:58:37.509866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/style.js?v=1.0","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6174734545f4d0a24a22ae2f24526eaa","sha1":"969abdca32818ce8437a095b6c1e478d2bf70345","sha256":"d943adf3ed1dad80fb33a3380e56e5a584293f8d1694dbb6d5c5d1c6036ee406","sha512":"017d07cb8e391f853c7add6f7ecc503c09791b8a76a942bd51ecd55d203ab5d773bfdcc90b33f911ced9a4538f6d0e28f7141055449e2f9dfa29976b0cbfa955","ssdeep":"96:xEU393Bu563333G+3v+3tZYJWqr8xZMq038T4hfclwCBMkyZH:xEU393Bu56333R3m3s8xZMtMUhfewwMD","tlshash":"6ec1438ff251143505fb373a822f5b09af7f2a1a4945d124f0fb46a41f6c509a767e4c","size":5854,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-13T01:24:50.401914Z","times_seen":2186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fb1db1499b1dc02bb3caf46035bd71d","sha1":"c2288d9e5b722ec41bdc9a4e2001fc006a126e0b","sha256":"91c13469f6ba26112e411b3d5acb3c9b89e7f8287a8ddf7705daffeaeab0d2d7","sha512":"ce5427040f717a6d9af6f74b29ce76121f427985589e30ef230cd1757664a9f7fb2bdf602d19f53e0a7d7687d9a6db408d9bcb3c79d5a806e8b295d9dd4e776d","ssdeep":"","tlshash":"8bc09b14307244d1855f795d5b57de151023105750455211790c49467f9083b1e17f96","size":133,"data":"","first_seen":"2023-11-30T07:30:24Z","last_seen":"2026-06-07T01:39:41.70056Z","times_seen":1445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2015fe4e8911558500fb094aac79383b","sha1":"2d1e5126c8e3386153082b98e841d7a03435d975","sha256":"bf2d2ce2803063fd72be8165d5fbbc700e24dfd6bfcb351f064367a90db9ef4e","sha512":"d6e3fb657e8dd62f942f2f59000ace81b36ce43ebcc8abda4018c1d73b155b3ce2e83d33dc1ac86cfe81b0d76100137197b905c1f87e9f2f194a4e2eac3013dd","ssdeep":"384:fD9HWD99TpJGd+iesmAnxpakrwHVXHh1p7l8dVNOpZpMOUROOHEAk:fDiAebALak0HVXHRl8dVNSpPUR1HEb","tlshash":"ab821ccd7253b11a8397707a607f420ef23a5899a8184850e059c9fcbe74de8427ff6e","size":18450,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.388065Z","times_seen":2405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-totomacau.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-totomacau.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52505\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-cd19\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3faac5f712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52505,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"1aa941152037ed686d532ae5691731d7","sha1":"8222036a29fa540a55dbfc2cfff401b12d5cfcf4","sha256":"44afa7bac070be11a25113dd4ced630691439d7801bb9fbaf0b2251776d1e558","sha512":"c310d4567377aeac86f5427ce17f1a625b23552869737634a66946362619f616cb69b0b74ecc96080bae282684f553227fde12019a927cc9d1d5098c0ab62c95","ssdeep":"1536:qMgV6MUNNyDP4yWj4GYkUnk5hNQRh3txlI:qY/6DgZXUCNQLtY","tlshash":"5333024dde52a720c3e946ff7538938c06464b64066b3d90fe080982ee32fa65f63769","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.353128Z","times_seen":1847,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"landingsplash.xyz/banner/image/promotion/IDNTOTOSYD.jpg","fqdn":"landingsplash.xyz","domain":"landingsplash.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landingsplash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 10:48:32 GMT","end":"Thu, 02 Jul 2026 11:47:14 GMT"},"fingerprint":{"sha1":"CB:82:FC:AF:C6:58:D4:6F:13:F4:6C:7E:E7:06:2E:8C:DB:45:A4:8B","sha256":"DA:CC:54:07:F0:B8:3F:12:7D:34:75:25:ED:B7:E7:AA:EC:99:B2:10:E7:9B:78:3A:9A:E5:25:81:FB:E6:02:78"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTOSYD.jpg HTTP/1.1\r\nHost: landingsplash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/html\r\nlocation: https://object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTOSYD.jpg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vc6TEN8I8dJTLQxBALKyS7DQ%2FpNkzXt1bjn7WD0KQhtA2GmU107EIwbzhDfoASvD5W9T0o4zrFeHL4nI%2F5LyQxv6VaO%2FCFwXM2cEhGB3anVBoy6ac19jUb%2BJ8FIhh4mnZ4O52g%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9f37f3fb198c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90323,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T03:48:59.088436Z","times_seen":16375574,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":27,"connect":2,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/nivo-lightbox/css/themes/default/default.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/nivo-lightbox/css/themes/default/default.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-91f\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa5bd7712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2335,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"701a1e3d0716ea44e6efca8e242164e5","sha1":"a38f953d2b470cf6de67c78ff8019a64b7263266","sha256":"61bf4f0d6d9585b0d12ec015e8ad0c0df1a7f0413a0e1195e2697f47a0a838d7","sha512":"298887a999a4d381355788e9ec4da1aaae7689d64befd3ee2b0fcaddfb91e3ca7b736c9a3906ce6da5762bb48171fe9cd506e8fc4f6f8312816e7f870c3ce73f","ssdeep":"","tlshash":"ce412a3a7754a14d71eea1133104d3b61b6d884ffe11357f46e9a4a3f6c309a8c23b91","first_seen":"2024-08-20T10:52:52.925472Z","last_seen":"2026-06-13T01:24:50.302852Z","times_seen":827,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/dana.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/dana.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2233\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-8b9\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3faecc4712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2233,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 25, 8-bit/color RGBA, non-interlaced","md5":"d4c86054bef770accb247693dce1184d","sha1":"215ae0206849177269831f7b9e433794b2ef80ea","sha256":"eb6f10f5452fd08234a524d21df41a6b9be1466c0c3acd39017951cd4122a3cf","sha512":"90e02eecfe4f198e6d5f18e6479781e9be9d3597f2d59ebc91a3659fdca1416db7fefc1daec550b95643809faf33433ba0409903f7c238517898f9905ddf25d3","ssdeep":"","tlshash":"2d410c6ef6816981607d8fd108ce614ace6348c4ca60f4a46cf6dd5f8b216958c188df","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.303904Z","times_seen":1875,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/danamon.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/danamon.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 897\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-381\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fafcd4712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":897,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 83 x 21, 8-bit colormap, non-interlaced","md5":"09c3d58d1975cda982b351344ed43da1","sha1":"83c6e4c954bd431779cbc478472e3931c65f204e","sha256":"3e911cbcd7f001af49b046d34bb7cc40c9b2e3ff280d0da498641c99a6509dfe","sha512":"c1b780aba1e8a03e333a7e35bf08a4c2037a1b6989ce86831243bcc1d4d0f8c9eae6fc8430f540de41a90f2ad6b4da91eca2cbe3902d0e0e05d6f06d287c63cd","ssdeep":"","tlshash":"a811b7f69c11381c64d1f9d3302fc26ca53d12521ab1874bd7972cbaee2f6800054270","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.327349Z","times_seen":1258,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-24dspin.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-24dspin.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5339\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-14db\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3faac58712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5339,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"97ce6779ea88d190219b696fdd95ad7c","sha1":"14d912aeee43d9c6cebaac1f3c59ea97f7fd364b","sha256":"bb33c75ebfea05c8a890cf324caa643447aff6ccc845cf1b6877d9d0ed214a61","sha512":"f51db55d747f74d9b831a82beb843775ae8a4b6c61c966e0b5366bdfbd65a76267e3a510075d50e8592561a63e92cd39e9908da7e305cf9810b22b9851b12276","ssdeep":"96:Ht193sZq+nJ+b1FVDlxInCZwQy1RUchyAT1CiIGuaXf126FJUQKbSbSbj:Ht193un0xHInT7U+yA1h3uaXfc6jgmmX","tlshash":"17b16bdee1ad8199f07944f849e0b1a85f1459370ee008f68abd0eb60c1a66fc1642db","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.409484Z","times_seen":1851,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/cu/logo.png","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/cu/logo.png HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/assets/css/cu/cu2.css?v=1777399084\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 14623\r\nlast-modified: Thu, 09 May 2024 06:29:40 GMT\r\netag: \"663c6d54-391f\"\r\nexpires: Thu, 28 May 2026 17:58:07 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f4066b2d712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 63, 8-bit/color RGBA, non-interlaced","md5":"2f79ccd99cfec5da58e1c431e800a746","sha1":"36e1265a838812fcaa6e0c6d9eca760ac4feaa0c","sha256":"bbc7b184e75225d31020c82e4ecf1edfd79eefbec3f26a8f7e8df98ab7760aad","sha512":"799ff84c687ce4ad8c348d27767eb6b238c2d3072c3f93ff458e6124f7bf5c1a23f1d21488ae0d16a4862bf056a2126bf9fbe7cf353f4fbb2d31dc717f3e2cff","ssdeep":"384:FINQEOXCdseoXzKUt3DpO6XBxYUM+XT0go0nnpwx:mQEOX1eoXzKUxDw6x3tLo0npY","tlshash":"2d62c0b3f89079cf889104b9b17d2367e4266032ed23e5714c9f98f5f661be988886d1","first_seen":"2026-04-28T17:58:37.399096Z","last_seen":"2026-04-28T18:23:04.462574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-sicbo[dice].jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-sicbo[dice].jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6397\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-18fd\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3faec9e712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6397,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 210x205, components 3","md5":"0ba7932557a2ef57f4a404c2e8cc89ca","sha1":"bdaee9aa983c86abc3b6e12d904263d9d020b8d1","sha256":"944e25293de1902e94503301ab274b4348c7d48828414eee613fdbfc614dd74c","sha512":"008d4ea19a9814894495373b9537293bc5ccb2e213657c7ee2122d09121b84456b64be8ee52216381a891bf561f023e4bb90e208561667eba3ae53d51d45d613","ssdeep":"192:U/jMXLdi8mVPcW4Aiycewb1WBZNXb592cQ:Ug7Q71Z4Am5ZWld0","tlshash":"b3d19e678ee8382beaa6463c19d45cf837a18ec31e64a590f6cd3d847877120c84729d","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.376332Z","times_seen":1818,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":440,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/regular/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/regular/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"13133-n+q1flyUhQcTQlCvNONC51P8Ap0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\nage: 992513\r\nx-served-by: cache-fra-etou8220061-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12135\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78131,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"troff or preprocessor input, ASCII text","md5":"7fe7108986e8596a197c607b2d989d89","sha1":"9feab57e5c948507134250af34e342e753fc029d","sha256":"873761b8711147dc516b6102936e9ad005f3a3015349efcde1a496f0326f1051","sha512":"73b14fe9422707df4bdfd7fe031a94f3826d8e48e250188f934cfcd61a050c994790f21da68ca1914d87703e4886b71b54817e030c5a6843b480d55144a8dec8","ssdeep":"768:xy23Hzs74dchpGALQhS3cmfGtA6g7i4zzx9/yLR1rkzSX:xy23HIznLj35e66S9ze","tlshash":"8173f0e4f5fd18d05389e1d123072661bf0da329994a2c69cab3bd8df1c2219c78e6dd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-06-13T01:57:33.107062Z","times_seen":1958,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":108,"dns":1,"connect":17,"send":0,"wait":14,"receive":1,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/light/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/light/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"1553f-KjbcKgoCLmsDhVcDssU4CDZ3Hms\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\nage: 1409453\r\nx-served-by: cache-fra-eddf8230164-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87359,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d0c00e94901712da925ed893abcf1908","sha1":"2a36dc2a0a022e6b03855703b2c5380836771e6b","sha256":"f2e59699faaeee27da9edb86dd18f5ed3bd5113db3e4e388fdd23afcaf308865","sha512":"6cb3e110ea54d66ab7585f509c3bbdf019438b816cd78fba031c8bd40e8a013d55d01ab07869a00ddbe614bf348484411bd4cad166e64b6a90677bf6afcd92c6","ssdeep":"768:FxNC9RoWla5NQDGUfrIN1ENW/P40e/z96M8ftPxOPjqgA:FxNC9u1pUkNCo34jp6H","tlshash":"9083dee4f7fe18d09301d1e2a20aa761bb0da3249a462c58ca6379ed71e211dc7cf5dd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-06-13T01:24:50.468758Z","times_seen":1515,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":100,"dns":2,"connect":29,"send":0,"wait":14,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/css/marquee.css?v=zeb3as38jmmuznyrdtuz","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /css/marquee.css?v=zeb3as38jmmuznyrdtuz HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\ncontent-length: 674\r\nlast-modified: Mon, 12 Dec 2022 04:57:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6396b4a2-89f\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa5be4712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2207,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ccc75e363025d110b5985afa3187b43","sha1":"25460557a798bd582563b4a937bd8e818396c4b7","sha256":"2d2a7ab1708e5aeee4123d037d8484e9e4c3cca489b4b6b3b931143911403134","sha512":"abd2c4ba7445f3c380036c26a2498d990d9f9103fee6d5f67d5aa489f5a7531affc35dd6fd27e9269d5d804aa36870c3cde5d4182eaf968f9d13839e24f900b2","ssdeep":"","tlshash":"ae41f29b05171d04260bf4842f794201652d8403a28ed9aebea922ccfffa245d1a3acb","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-06-13T01:24:50.339669Z","times_seen":1989,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-totomacau5d.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-totomacau5d.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8889\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-22b9\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3facc85712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8889,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Converted from  WebP to JPG using ezgif.com\", baseline, precision 8, 210x205, components 3","md5":"67fd9d3808352cbbf6ab4e5e95203d96","sha1":"6183b3579f6fb6d0607e424ca11269f3c74c2d8e","sha256":"157c3fc50a9a79068835c64a4a57ad51f33cebff9c177e171e632d1e99134b84","sha512":"fcc42d43f3be3791b786e8e66caa3e3ff74ddf162a5d1fb2e409026d8eb05204f9f6373425f1d3432e50acf21b84bdace44861c7eaf2c1849b9da1f14a74c96c","ssdeep":"192:iytawtgRLxvmi5rF+WIKM63JP/iTL25zDA1mzM6nXOUddP9Io5vnHPqYFMU6kUN:ihw6/vX4WIKM65qTSiR6neSdP5RHPqYQ","tlshash":"9802ae4658568169f8ab8e3b683f53124e1c7b8bcac1786d153814bc02e3f959fccf05","first_seen":"2024-04-27T15:45:17Z","last_seen":"2026-06-13T01:24:50.293955Z","times_seen":1699,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-pools.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-pools.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6870\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-1ad6\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa9c48712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"1b61fe941c5f21b6a5b2a0021304325e","sha1":"57e917596324667df9bb88ef7aaa181bfd53ae0a","sha256":"c1af05964be2562a6bbf7c1d8f2a19554198d2e2c1980454a2b8f61f307772ff","sha512":"9072ec7b6b3efd84f1ca7409fb97f312d1a5731ffb9e2211bfb94e459dc9d92c6a260ca5f19ab994cdaee99153a3ad17194b40c26cc7545cb6cc4fee6fc5934e","ssdeep":"192:obNAW9Q/ok/Z6oHEwnklyK63TzFlT+u6KUt8ICBtlyzos7PE:kA3dB6MEwnklyK63FlquYKBXyzosQ","tlshash":"5de19dbe213a9c21cde70b3f31b7dc018a44d855d06b69c996eb39903720085e4e9e3f","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.281098Z","times_seen":1877,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/css/components/loader.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /css/components/loader.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Feb 2023 03:17:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63fc20b9-b86\"\r\nexpires: Thu, 28 May 2026 17:58:07 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f407cd52712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2950,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2950), with no line terminators","md5":"f81874edee808f64a81f1c1994902cbb","sha1":"3077fa00bc4fe56438a060eefcea27e910563c74","sha256":"2f75efe3c598d795e95fade1746451bb15e1e950724f34155195d4d6e93180ae","sha512":"58e8cff6f6ac4cf5e774156acbce75317be115694ab77006b157fbf8beff629b6f0a70421cd8535f937e0385091998263e9c3e36b11a5f0624711e5d709df6e2","ssdeep":"","tlshash":"025133390a025411c157cf9261c57f69042ee9276a334d5ff2087bdcc7e295d23a5f9e","first_seen":"2023-04-13T17:56:31Z","last_seen":"2026-06-13T01:24:50.4483Z","times_seen":1944,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/regular/Phosphor.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/regular/Phosphor.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"23fb4-DYFfFANzl8y/1I/l3775btbmYgU\"\r\naccept-ranges: bytes\r\nage: 2292225\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\nx-served-by: cache-fra-etou8220119-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 147380\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147380,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147380, version 1.0","md5":"527636c38907af87d10e6b15ac392648","sha1":"0d815f14037397ccbfd48fe5dfbef96ed6e66205","sha256":"c2ea45ea05ff5c7df1936770c104725f2a68f43fd343f35f3da23a30b27de32a","sha512":"e8e65252471cb9b85a3f03e128c3d504c7ea73a1123bc40b18dec46cd1b13da83a1313b1606b9a969cb9bb646bade289e5c8b5096a440505113e1652190d2511","ssdeep":"3072:AQbeiU5I7UJEmgfV57cK0jt6lvmT9QiyDsoEmmTHNAk5rsSbro:paF5DKXfVmKRxmKgmmTHNWS4","tlshash":"96e312840a514ca8d08167f795c42b1bdac69bb6f0b1e94d941f9eecd3bcf90f2d4a14","first_seen":"2024-07-01T20:12:46Z","last_seen":"2026-06-13T01:57:33.085099Z","times_seen":4204,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/vendor/bootstrap-checkbox.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/vendor/bootstrap-checkbox.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 May 2024 06:25:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c40-1b5c\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa3ba0712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7004,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (876)","md5":"3d4ce2ff275a69d37c270f286934a8da","sha1":"8fd72e27451d35b1cc243a1fac5fb4ebd52d4aae","sha256":"2f81d99d41759567af9d4e9562d4c62bef7ee42e4d1a7b62fc2d45b7a0e34334","sha512":"bec920b211a4a554404fca0245a1640d6722ba738d642a6edfd0623e1ce866eee7c5012d7cc3ea938f263c36d3eec5de1eedea076cbbd62365565f9269178acd","ssdeep":"192:pQu9GEHnN95MDkCeoj99LOSAUT6oIjOhL5fPKzRKz:pXN9z6tAUrcOH","tlshash":"fce1ec2ada610098f137c12d66cc9b9b6434942297252fbdfacb2478de9609c2c737dd","first_seen":"2025-12-04T05:42:45.98976Z","last_seen":"2026-06-13T01:24:50.313606Z","times_seen":823,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/search.png","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/search.png HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YG2WesH01wN3d9R5BL4HFa7yq%2FgsE8dagpidW4hbxCxUDu19e%2BEjWt5n37ImHoA32GpFdDX%2Fgp2JVadb5qT3fYKEWV3ROVKSPRCEaXey59lK8HYWGxmOlzH9W5Y%3D\"}]}\r\ncf-ray: 9f37f408ca1923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T03:48:59.088436Z","times_seen":16375574,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/thin/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/thin/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"14f3d-I+rOm+6NS9a6eVuIYVp4mWLfkZs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\nage: 3075718\r\nx-served-by: cache-fra-eddf8230089-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85821,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8da44bea4949cc1139a518660885c864","sha1":"23eace9bee8d4bd6ba795b88615a789962df919b","sha256":"41e0eae512457cbef8f0106108fbfb995952c24b3e600dca38516990b441c2af","sha512":"54f5b87886bf98d90f76074dc83e0617445e0b6e709052ac09012edd1af4d8ffc02014a2e84d2797be11fd249c8e8752ffa907d4ee8f2b94493e32030e278fe2","ssdeep":"768:ziCfRFurGvcZZsAbW/whmSfO7SkYP4gXNLNdUzDtrMzeP:ziCfR4bVbhhfG+kkJNc","tlshash":"7183e0e4f5bf1a901b21d1d0238a1620bb2f922c9a461c5eeb6379cdfdca118c58dddd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-06-13T01:24:50.428116Z","times_seen":1469,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":109,"dns":1,"connect":13,"send":0,"wait":14,"receive":5,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iframe15.otomatis.vip/scriptnwl/idntoto.js?1777399085","fqdn":"iframe15.otomatis.vip","domain":"otomatis.vip","tld":"vip"},"ip":{"addr":"104.20.41.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:06.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otomatis.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 00:29:02 GMT","end":"Fri, 26 Jun 2026 01:29:00 GMT"},"fingerprint":{"sha1":"FC:D8:D2:47:60:66:BB:3F:EA:F9:C4:24:EA:66:4F:B4:24:42:B7:0C","sha256":"FC:91:6D:5B:18:AD:69:B4:28:D1:0D:E1:22:AC:BD:16:C1:ED:F6:ED:7C:80:9E:4C:FE:CE:11:21:17:59:D5:45"}}},"request":{"raw":"GET /scriptnwl/idntoto.js?1777399085 HTTP/1.1\r\nHost: iframe15.otomatis.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://toto911mania.cyou/\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: no-cache\r\nvary: Accept-Encoding\r\nx-oss-request-id: 69F0F52E2FFB293136267F64\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST\r\naccess-control-max-age: 0\r\nlast-modified: Mon, 02 Mar 2026 08:41:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9921513079483474415\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: CAEQvQQYgYCA_NDqtuUZIiA3ZThhYjIyODIyZDk0Y2U3OGEyZjA5ODZjYjMzN2M2Mw--\r\ncontent-md5: rXNi6TjfHD3PoT45CKaiuw==\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f37f4030b61b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13919), with no line terminators","md5":"ad7362e938df1c3dcfa13e3908a6a2bb","sha1":"b019e82e59ca4c2655c5ba4268f3086685532fd1","sha256":"7299f2b20c82e43958b6ba588729b3a8b6999feb6b6f4ce683fbeadd446c2bb1","sha512":"3c1b9a30b9f18ba38d45b64270cdb148f47d51bad31dca8a3966aa1f20ea21995528e12b8d6060f76b206c5532003247a534d1f946af6fbb864aa8a0bc894c5c","ssdeep":"192:aoxARFx6JLOfqtQWNEDRlmhdOX37Ho0FN+6ixBKAWsRb8qRZOIs/3sllbn83750s:JyV6VOfqtQWaDLv7WDfuQ4f7hg3G","tlshash":"fc523499361087df1342af3a7f376948e16b8c81c94058def098ec096ec972dc5fa679","first_seen":"2026-03-04T11:21:36.405174Z","last_seen":"2026-04-29T21:29:37.480131Z","times_seen":29,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":34,"connect":1,"send":0,"wait":214,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"iframe15.otomatis.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoslab/v6/dazS1PrQQuCxC3iOAJFEJYUt79146ZFaIJxILcpzmhI.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/robotoslab/v6/dazS1PrQQuCxC3iOAJFEJYUt79146ZFaIJxILcpzmhI.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 12:19:28 GMT\r\nexpires: Thu, 22 Apr 2027 12:19:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 538719\r\nlast-modified: Thu, 28 Aug 2014 20:40:48 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31576,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31576, version 1.1","md5":"031611afee9339d4e1f76795a28aaeca","sha1":"8be046d89666cb1bc0323f4a22c6d63b62b922cb","sha256":"2de6a4f3964c03bb35fb9d54b3de00ac38330f5cd91389a3d462269c27775373","sha512":"5a640f6c2eca78c39646ef4bc1af2f932442188c6e1eb31f55c28426fbd940416e46e8d5da0be442d302bc1ab71d6585acac24bcb9bc3e0c8b1cb68ed9d7990a","ssdeep":"768:/OLXvKTy00GtnIF4KZnHlsaa8Nj6Vii1BLT4v2mkwEp1RK:IH00aGlsaVNwi8LsSu","tlshash":"5ee2f150de5ab94652aa0e7450c0021dc27121ccfbf8aca1b739d4d1966ebf799ece22","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.316403Z","times_seen":1668,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":166,"dns":1,"connect":10,"send":0,"wait":25,"receive":3,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 07:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 07:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 554642\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-13T03:49:15.429438Z","times_seen":209524,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/custom/quick_menus.min.js?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /js/custom/quick_menus.min.js?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Jan 2026 09:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696f4d7b-295c\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fbbe00712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10588,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10588), with no line terminators","md5":"7317959829252a5b6ec0bfa7e8fd1cd7","sha1":"adeea8e64f82c0c5bf31cae7573fb2da2dd9379f","sha256":"a1dd4aeb77f3316b4e815fa2bc28fe65dd008f74e59cd6b3f2ed9f179874bdc1","sha512":"c8598cd7dab477a0e712a6b0b8aa87e901db9c9a46beee7c7657091d453e88cbac6b1c8e8da419de697208aa3c35bc9376205200b955a86a884b7c02bade5641","ssdeep":"192:nBggLQBa/19nBvb0ywD5UAL5H+L6FNrn5IAgyJP/:nhoBNrn6pyd","tlshash":"7c22735b3ed200355a0baf9d67f98746376c7580c932c2793fcc520b5349da9c9a1bac","first_seen":"2026-01-21T20:11:17.205842Z","last_seen":"2026-06-13T01:24:50.474166Z","times_seen":661,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/gif/btn-buktiwd.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/gif/btn-buktiwd.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 660968\r\nlast-modified: Fri, 17 Apr 2026 08:29:13 GMT\r\netag: \"69e1ef59-a15e8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQgrymelbniZU9yrQ7PGISgSIC2S28HKsUA071mb9y4M%2Bpo%2Brkq1lAnSQXEmFF5HesO0%2Fu3D6F6aPLjPAzvHAyh%2Ffk7v4fG45GIMYBz6Uk5WW7agNMzRlg7IsY0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f4102aff23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":660968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e6dc9ea6e467449439fbf5e53f05776","sha1":"f3c5e72d63d81a5e75420c0ee8fbb2729bb50f42","sha256":"a99d42212f144a3d31abc4ce4f594e006cf9fdd57180febd6e6436a47d29bf6a","sha512":"b319d3daee1317ed0304e3666559f5850b02b258ff3e2a90b8fd28b11aee3790fb37b408e4de9e7fbf19edc3097d543906c2584e2ef91012f6122c94573c6540","ssdeep":"12288:J4B4/SRvjtzVvE6BEPSeqZMWO2YQUc4aQ0La3fKeidv7N4lpBckpTrs:J4OyjJJ/B56uG3idv7N6pBcYs","tlshash":"7ee4238dd9008871e2361aff56fa41428e6fc11c6d239a990d9f33a25489d9f90ff9f1","first_seen":"2026-04-28T17:58:37.409171Z","last_seen":"2026-04-28T18:23:04.502768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-3T65VL3D5Z","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:11.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-3T65VL3D5Z HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 28 Apr 2026 17:58:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Google Tag Manager\r\ncontent-length: 1584\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T03:48:59.088436Z","times_seen":16375574,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":82,"dns":2,"connect":21,"send":0,"wait":33,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/tweet-js/jquery.tweet.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/tweet-js/jquery.tweet.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-2011\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fbadd8712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8209,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8199), with no line terminators","md5":"e6d5a5f7a0d7af2a2c63b97919cac65a","sha1":"1f61ee273e334ebd7388e219157bf8654482f009","sha256":"431cff4d223f3296f7d4b543573271745a91d9069a3666844fb3b037aad844c7","sha512":"a8b64bfe5a39d6b58e1d5b9d1864ffb0e87be8e164a0cf71a39fcbad5c4a81fb4ad400dc6416e6a970265d3804954809949678bcc639fb10f763767777ac6922","ssdeep":"192:7IXczrVLA8Tmk+a5m21yVTp5Czsa5qdmzVQjBIxbFDyZ1ewMOVrkxmtUtkwR:PAOjXsa5wmiP1utkwR","tlshash":"63029370f196503b0ae32272b91b6390b73dca4bc5d5dd53c37594482fa5f96a232ac3","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.31576Z","times_seen":2402,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/cdn-cgi/challenge-platform/h/g/scripts/jsd/a80f1640690f/main.js?","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/a80f1640690f/main.js? HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=eSAwdPrvk9GeafsmP6gFTDAY8BpoTrOKJXa7No8uO3k-1777399087.550206-1.0.1.1-hqqs5o8dFUX1oUaTJbRC_zE7.S.AqGa1mGPdqBzSfZaA9xj_gzvX0.P6CyWeZbf1Vi0Lvsl4wACXLgplYdvkc9_clpVIPC9zpHSrehH.ArXc62cA4NL6IWlDcpJLU_bg; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo; laravel_session=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%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=K096Ig422.qBXdlwlbcace_KSvNhXsJmrcfM05Swq4w-1777399087.6701095-1.0.1.1-NKZPe2bqSL1..uMBBn3qeBSiARtNeoVBekwWXkFrNPui0Av2ZY2lxUdkBYCr4AuCfslpqaYTDWuUaGC5eui4zGFIdBGCddpIqB2Zeh3OLTV39fFBErn5x8AdDBZAAMIJ; HttpOnly; Secure; Path=/; Domain=toto911mania.cyou; Expires=Tue, 28 Apr 2026 18:28:07 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f37f409efd9712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24205,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (24205), with no line terminators","md5":"a8f159acd63781cc6ac980d407b61724","sha1":"af75e9cf9e687be06380ec60d1f95fe26b6917a9","sha256":"61f1d3bb3128667300162eec6e2ada3cad475a6a1c1568e3868463d31b8a0cf3","sha512":"5e23d0f90fb6872e42cd62575815892d32f312057198380a63b876aa9a6c04f421ac34b470148c36fad9a4a59810c4d42001b247f71f7824ded9403410d83137","ssdeep":"384:mcApBt0GmR4eYrPuS7p7dXVD046JELBlPhqU7iXUvIk26XfL4492R:XApBt0ncTuSd5XRsJml7X86XT44s","tlshash":"edb2b6ec77c6b75987718339109b78c655baad87202e08b4c210e8b4fc79f6c557b8e8","first_seen":"2026-04-28T17:21:09.002768Z","last_seen":"2026-04-28T17:58:37.411575Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-dice6.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-dice6.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5421\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-152d\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3faac5b712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"59818809868556332479b364aab8ea7f","sha1":"4027cbea0c7396fc1cb6dbc7b276392723cf8c9e","sha256":"d942e4f9b28cd8cfe2961f8a40919d77a8548e8341782c9c129bccfb87dee632","sha512":"ab2f3fd4af44c18594949d3e4b75578e6cd4a83ae7561adff6c4bd27619770ef89269119ad1d870102a4bac8bb30d4ca8d9e00f7a4473f10b6417678dd4ea86c","ssdeep":"96:M1R/idpPiPVliXwrGjUmubD4BZyzddkfAIwZG9wD/wqXt75P+s0ofnn+:g8/P+lO0G4mTZyzdSIIwZRzfXt1G","tlshash":"86b16ba06b45da1bffefe7330697cf00e7e48d6aac31871751bf520144bc5c45a86a18","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.391911Z","times_seen":1813,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/text-rotator/css/simpletextrotator.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/text-rotator/css/simpletextrotator.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\ncontent-length: 485\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-b7a\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa3ba9712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (558)","md5":"2806c1be092ab58c3f85725925cc72f9","sha1":"e73429f735fd768dcdfb11551e36ed7ae5f95b1f","sha256":"c5e5cb1ccc179012ca2731f45675e69d4f18c6f49d42801176b3652e035d2e2b","sha512":"a4d42d3805a16cd11127e915375c61a2201db28d7f4204223df8f778a8fb5e1828f5994e4803086e0729f9aff52dd864a21c951e94e4d1273b51119cc2c180d5","ssdeep":"","tlshash":"3a51a7b65c9095cd893a8e08e7cd1fa9062dc3b218621d9e7306260b8dc7e6e53ac753","first_seen":"2023-12-02T05:19:17Z","last_seen":"2026-06-13T01:24:50.453006Z","times_seen":824,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/game_compressed_ic.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/game_compressed_ic.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 May 2024 06:25:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c40-b08\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa6bf5712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2824,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"05fa3ce826ade67f9423c36dfd5efdc2","sha1":"634ec178c49df84b93c386e78b2c51336216f4a2","sha256":"ffba6e80680a3cc582c45c65033d427529ef1ff5dede865ccd878a4dc42308da","sha512":"aa26a856cd5bd8a4000ce5f15e69f19c96bdc1011d571e1082ed089c530623e50b7e92c59213f886d295cf0006630689c41d27eaa498b02ff633a56929ff2cd0","ssdeep":"","tlshash":"1e515b37299574ceb01985a46925bb18870d894af24d0e2cfa3efefdb70c0469873dc9","first_seen":"2025-12-04T05:42:46.011586Z","last_seen":"2026-06-13T01:24:50.40564Z","times_seen":820,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/additional.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/additional.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 May 2024 06:25:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c3c-299f\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa7bfe712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10655,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7696)","md5":"2ff4a977a650b76a8641166f92a7507d","sha1":"3b3e18ea7c29a8acdbdfc3c5b444456f781021e9","sha256":"2b735a9ab21e15a9f70552ac4d1f479b4df7bf5161a07c1bbee610e00798c3f4","sha512":"e5e4602361570a4a6bd76fa611386685d004e8597b4e8f9121f35758bbb9931a4db4641dbf8ac8530d2fd208278dbda7700846c47cf2d3d099a8d1c0b3729d7c","ssdeep":"96:MJn1MOnIYUHsX/dGOeywAjJLX0RcP5VKXsp27lbw0kIoX6pd6j+lY/g4nqqaMTuU:KiuIrLAjJLX0RZD03uBn21","tlshash":"89227c2754eafddf301f83981d3926614b4ac688d7024f6eb36cf3f9749a51d4432a8a","first_seen":"2023-10-17T12:18:33Z","last_seen":"2026-06-13T01:24:50.412211Z","times_seen":1739,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/file_gzchkv.webp","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 08:15:55 GMT","end":"Fri, 26 Jun 2026 09:13:31 GMT"},"fingerprint":{"sha1":"DA:24:A7:95:50:2A:1F:25:7E:8A:10:1B:6B:40:E2:54:5F:6D:FC:DB","sha256":"64:E4:F8:7F:30:CE:91:32:B9:C1:F2:D0:C5:79:2B:E4:B4:34:E1:B6:C5:84:59:89:76:7C:2C:1C:E2:CB:1C:B9"}}},"request":{"raw":"GET /banner/image/promotion/file_gzchkv.webp HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 249252\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 18 Apr 2026 00:26:58 GMT\r\netag: \"69e2cfd2-3cda4\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k3NHGq%2Ffk%2BDoAuPQQI7hu1ym8O4Di%2F1pjKA5%2F6uN47IiVK0bHOg2EL6bZMJvPJKbSXywTaXGtbZNweEG4ey0ESgoJXg1D8O2FxVLZq8gb7DIKNhpt%2BYV9Gqi1ppbJr2xXQ0c\"}]}\r\nage: 3596\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9f37f3fb1df656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42174da1e48aaaead59e3631a1057348","sha1":"f47ca688e3758f3792a8900e602e8844fa136de0","sha256":"23fbaf02f9ebb7f906fafdeac3b862ee0349c13a463b1acdebdc7d395aa7d059","sha512":"75e407e5ad3ba0c7a0495c4193be92c2af6fcae22a921bcbbf6ef92d1857ede0ac727d2e20a866c167aa84b97593a5d80935bf2d518dcd66703ea97774b9d150","ssdeep":"6144:ovh3e4nqCyQzhuhZfzru+yjIwEOUG6N1YO2LmyREZyJ:KR3DyGhuhl/yjiOWN1Do1RgyJ","tlshash":"893422dbe16386d7da70667aa1883d8729e4ce2d0934c6084cb3d66c79275f22fbc4c4","first_seen":"2026-04-18T07:34:27.938157Z","last_seen":"2026-05-14T10:33:13.467075Z","times_seen":48,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-4812\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fb9dc8712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18450,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18450), with no line terminators","md5":"2015fe4e8911558500fb094aac79383b","sha1":"2d1e5126c8e3386153082b98e841d7a03435d975","sha256":"bf2d2ce2803063fd72be8165d5fbbc700e24dfd6bfcb351f064367a90db9ef4e","sha512":"d6e3fb657e8dd62f942f2f59000ace81b36ce43ebcc8abda4018c1d73b155b3ce2e83d33dc1ac86cfe81b0d76100137197b905c1f87e9f2f194a4e2eac3013dd","ssdeep":"384:fD9HWD99TpJGd+iesmAnxpakrwHVXHh1p7l8dVNOpZpMOUROOHEAk:fDiAebALak0HVXHRl8dVNSpPUR1HEb","tlshash":"ab821ccd7253b11a8397707a607f420ef23a5899a8184850e059c9fcbe74de8427ff6e","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.388065Z","times_seen":2405,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=04fe8641-1c1d-4522-b9bc-90ca8ca0611c\u0026version=1600.0.1.117.81.321.32.1.3.48.3.28.12\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=04fe8641-1c1d-4522-b9bc-90ca8ca0611c\u0026version=1600.0.1.117.81.321.32.1.3.48.3.28.12\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 2007\r\ncache-control: public, max-age=600\r\nexpires: Tue, 28 Apr 2026 18:08:08 GMT\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6419,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (6401), with no line terminators","md5":"056796a49539bf22c7f22abdb04bc884","sha1":"1a1e7a162b61373524887c379d4a97d91a1a2cf9","sha256":"5a8b8636536af83115f52220f4ef45e17deb6ffca13ce6741831f7f4662a806c","sha512":"13536928c4fe4d1612542be7e41778e0c4f82369cd257efc4a630e9a0ba62ffc7b9203c114848482a019bb36c71566d01e3b1b76a62519cbd1f68ff2d13c15be","ssdeep":"192:LGsXGAqGwGaVhZaDxVQOieFxVvNfmaxb2:LGsXGAqGwGaVh4Dx1ieFxffmaxy","tlshash":"70d1442a835fc8bbb377928a63cb770a3408507971f85d7fe464cb70a1861d7d211daa","first_seen":"2026-04-28T17:58:37.41516Z","last_seen":"2026-04-28T18:23:04.466087Z","times_seen":2,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/vendor/bootstrap/bootstrap.min.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/vendor/bootstrap/bootstrap.min.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Feb 2025 03:25:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a03711-1aaeb\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa2b92712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109291,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0a79db938c7418a0f16560c8758d8d4e","sha1":"79b10b3baa06c8b73b986187521e4a0d6766f938","sha256":"1100977a241133f42972e197c28a12254b88b7b512eb3f4a8d79f3d7ef8a0084","sha512":"3c026bdb70c1b28ca42b52d5e6c77e9ca1f5f63199ebfd3527c92f3bfcaf0b48f0b5e16ee88bda50ddeb5795084f57c3685a50ce49c66818cf31c45b302452c8","ssdeep":"768:jbGxwUkBUmlpztzuRdvGN6eABkdIUIbZbnbJN8gwaKNhL3tqNhkRQmNaw:kwldERdvGNIkabbRk3chO","tlshash":"c9b3d7a0f11031ea7223c55a71d0ed872619a053e66b4fb7f22f25d88f895ca1773f1a","first_seen":"2025-02-03T12:58:18.829121Z","last_seen":"2026-06-13T01:24:50.407312Z","times_seen":1872,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/banner/photo_2024-01-17_15-12-52.jpg","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 17:16:33 GMT","end":"Tue, 23 Jun 2026 18:16:28 GMT"},"fingerprint":{"sha1":"E9:BD:49:DE:5D:52:F1:D1:4A:EE:03:E4:9F:9E:C5:88:40:61:DA:51","sha256":"FF:F4:E3:27:0B:3E:62:20:1F:90:C6:F8:F0:77:89:A1:23:EA:5F:E3:4D:27:1D:36:8C:82:BD:18:87:D0:F4:F3"}}},"request":{"raw":"GET /banner/image/banner/photo_2024-01-17_15-12-52.jpg HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65156\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Oct 2024 18:24:37 GMT\r\netag: \"6702d5e5-fe84\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 4438\r\nexpires: Tue, 28 Apr 2026 21:58:05 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9f37f3fb1843b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65156,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 805x372, components 3","md5":"c84e99b34e8b5b415e96b7e997b80ca9","sha1":"eda46315ea6490e9b6f6ed555d858e4a5985a51c","sha256":"494e58831398fac29d99b39418c070bd8a06f997c84b222a59003da9f0771168","sha512":"954338482ad65af3189c6c0b96e406fb87af1397ef797ad0331c2f4f06898cbf5a1557f20ed26d1ff23afbb80fbd04a472454a576c17cb0f8bc944269a1f30ab","ssdeep":"1536:qDhne6ppgmksYXzG3hCiVz6TszfJ+Pa1gM67ja71:qDVlpEX63AiVCszfJJ1xl1","tlshash":"4653026178279b53ee30f0bc94b43f7ab7533254eb005242a66f1a461b3474872deae2","first_seen":"2024-10-11T08:50:22.523538Z","last_seen":"2026-06-03T14:21:47.886774Z","times_seen":1156,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":38,"connect":2,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/owl-carousel/owl.carousel.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/owl.carousel.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-3a44\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fb9dd6712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14916,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14916), with no line terminators","md5":"2fec2de7cc7d2d9a66130311f52b5db8","sha1":"5cfc389925bd8200ee1e0fb224434ded9cae3f15","sha256":"4b18105a346260a3e8359cd02633fd5f8bb244f2d5f43e4375a1efd10e5c865a","sha512":"2c65ad232d52605402fe3c61104ca6e19be96dd89eb072e8554c3019b549c1af260a6fd16ab7c007b4ddc24e9c0bec770aba5cc4d1cff2fb7a9a241699d8a04c","ssdeep":"384:XWxb9XXAhOfMSelTARgzoSC0Z4eAchzD/DM5F:8b9uTARgz5C0ZVDL2","tlshash":"1962183a2152321653b261af157c818213e548023ec7b464f9e6f8edebb6161117bbff","first_seen":"2023-03-07T01:34:34Z","last_seen":"2026-06-13T01:24:50.29937Z","times_seen":3711,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/background/januari2026.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/background/januari2026.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 448236\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Apr 2026 17:30:22 GMT\r\netag: \"69e905ae-6d6ec\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LESG3Ut0q018tCVwxh9h%2F9hFOd6c84o6Mu2UeLeyX94Nuqc1kTrfmlZlmh8FKLSFbl%2BwOIrRF2IW4dylFsXWHGhJ%2FeZ2QHqKVLcKcGfi5eSr3xZKugRjEeRFVQ%3D\"}]}\r\ncf-ray: 9f37f3fabd283181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":448236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f70017cbaffce2eef5d3062a45d63b9e","sha1":"8181b6c2c067f37ccca8c8a03d7f54dce759c568","sha256":"cb38ecb6235e16da656c2ac6e37e4f018f073a4afd0b7c3cf7fd9735da93ddf3","sha512":"b6c90a0f788806b035e72292f5edc1b8177c9663e25d4436a35fa9157d8668d24b7db03cc20b90fab87beefacf1413071f8290284990964380e7c199ea991359","ssdeep":"12288:ZGd+yJCptUfT4r1HNdmAaauGlddvMHHFuJP:sUGCIf096auGlrMS","tlshash":"e59423681f52e7cad1a1181f3ef6cb5c481568f210e8f2e3c4376f71a1dab997728186","first_seen":"2026-04-28T17:58:37.417694Z","last_seen":"2026-04-28T18:23:04.478792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":179,"receive":737,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/auth/login.js?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /js/auth/login.js?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 18 Dec 2025 02:26:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69436653-1a66b\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbbdf7712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65357), with no line terminators","md5":"8a4b15ed3f06513dae99cc4235a6ec08","sha1":"cb40060815eb3dbf9447f934cadd04bcb859474d","sha256":"4d83408d7af18fde2333ba7cb69812fcbe1a7ee412514d12f51edc5055a03e08","sha512":"a052e76051b1e017563a96a5ee7f9fa80e86055cf81895cd0097321e076514075399ec1a6d2ebef927c124bafb647c34dd21eb38b596b9c842a6d695ccf76962","ssdeep":"1536:pJbZ8DgaIucWkVQfRVeiLxHg1SFkQr+X5grRaL8sMw+pN:pJzWkVaVeiRg1SFk6Hr8L8j","tlshash":"cab38b84b182743757eb44a960aad208f2655405fc234c54f72cc9d19fabd8fa1b3fba","first_seen":"2025-12-18T02:47:54.07807Z","last_seen":"2026-06-13T01:24:50.479257Z","times_seen":740,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/a80f1640690f/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=eSAwdPrvk9GeafsmP6gFTDAY8BpoTrOKJXa7No8uO3k-1777399087.550206-1.0.1.1-hqqs5o8dFUX1oUaTJbRC_zE7.S.AqGa1mGPdqBzSfZaA9xj_gzvX0.P6CyWeZbf1Vi0Lvsl4wACXLgplYdvkc9_clpVIPC9zpHSrehH.ArXc62cA4NL6IWlDcpJLU_bg; HttpOnly; Secure; Path=/; Domain=toto911mania.cyou; Expires=Tue, 28 Apr 2026 18:28:07 GMT\r\nserver: cloudflare\r\ncf-ray: 9f37f4092ef4712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24205,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T03:48:59.088436Z","times_seen":16375574,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTTOHK.jpg","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 17:16:33 GMT","end":"Tue, 23 Jun 2026 18:16:28 GMT"},"fingerprint":{"sha1":"E9:BD:49:DE:5D:52:F1:D1:4A:EE:03:E4:9F:9E:C5:88:40:61:DA:51","sha256":"FF:F4:E3:27:0B:3E:62:20:1F:90:C6:F8:F0:77:89:A1:23:EA:5F:E3:4D:27:1D:36:8C:82:BD:18:87:D0:F4:F3"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTTOHK.jpg HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://toto911mania.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88744\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Oct 2024 08:12:30 GMT\r\netag: \"670f756e-15aa8\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 2996\r\nexpires: Tue, 28 Apr 2026 21:58:07 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9f37f406cddfb518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88744,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 840x480, components 3","md5":"a68cbd4cadc54ae7c2bdcb8bcf4c13b7","sha1":"4e8ca505e4b8ee0f154d9446d44e98769fffccdf","sha256":"cf91122176ba6cadc04f42930dd19b4f8db1b670efcb5b9d8cdc18696e3d1a65","sha512":"58a3e5cfb5a3d9faa2cbf7508765c96f1cc37266f0dc839b84fca1d8c77cb717eb277eddafa93decd163ebd06c2facf7e9cbd0612818a17038c3b22bea548f41","ssdeep":"1536:QPc1JYCEuB4veZYnmyKx9wwwwwwwwwwwwwdTa39wIQBqoQYCrPcXHYoXYwQ/NAFZ:/2CbUnmyvGwIJ3DRcYwENAP","tlshash":"fc831209cda5adf3c987f67993301364e3b1bc4dce4635de44fcc29922a60506d6abd8","first_seen":"2024-10-22T04:17:53.670323Z","last_seen":"2026-06-03T14:21:47.95486Z","times_seen":1508,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.2/src/index.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.2/src/index.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://toto911mania.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9f37f409db730b02-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 1046477\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 28 Apr 2027 17:58:07 GMT\r\nlast-modified: Wed, 04 Feb 2026 22:38:18 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:n+FCXfkJ7cEmTqq7J0ayH83AXxJOHkVRUDGhnnqXuu8=:\r\nfly-request-id: 01KGNCW9DQTBMTNZD9A7SQGM2H-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":356,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"54cdb604e88d3093ff6309ffdff93a6a","sha1":"fb023b1b8b3dd5c3a5822d56c63119d19faa0c14","sha256":"9fe1425df909edc1264eaabb2746b21fcdc05f124e1e45515031a19e7a97baef","sha512":"8c6561814787a33709425d92d78fcb4300755e8b9b7bf0b061e3a6724586ab67fe94739ad1e71864e857aba873985f41d49784eb4f739c4018a3c84dca9ba78c","ssdeep":"","tlshash":"60e0202a50f18652967640cbf4175155f451013e540cd940d1c8cc7fad68c9530fa754","first_seen":"2025-04-08T04:25:33.720822Z","last_seen":"2026-06-13T01:24:50.473646Z","times_seen":1040,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/script/qris-toto911.js","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /script/qris-toto911.js HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Apr 2026 08:28:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e1ef1b-11d4\"\r\nexpires: Wed, 29 Apr 2026 05:58:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILgY2A3H8E77u7RVD6I0253VCg96waSaW%2FbirjtwCa2%2BqCNXazH3rPYh3AK%2Bxvqz6ZOXrgxdadiwWpvWmytRiMI1KBxP7qRT2HdLseEfKNVzQozAEDZw1xjWTXU%3D\"}]}\r\ncf-ray: 9f37f3fa9cda3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4564,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ab19284b5b8af6786d487296974dae82","sha1":"170a554e6877959f1b12aa3285f6c29d1c382747","sha256":"547e3802f705ba961da40c3e131a2a0c2dbe3aaea58cf0634689623e47e249b8","sha512":"815f9c4ddc39b4693d3141ae3354b5414dcee055a2d52b9510d44cd1bd885195f0ab81620ff1b03660ea5f09bd616422c3c74667a2ffbb01e9991737b9664c9d","ssdeep":"96:IG+6uDV7Sixiz2wsuJ+zwE+7Ok2/fH8xAewwIaw:06up7SixizdsO+zwE+7OvfH8SewTP","tlshash":"5a9122d574e214bb227bb075472b6f163b3400076109d9287e9dc7909fb0da6e3726ed","first_seen":"2026-04-28T17:58:37.420551Z","last_seen":"2026-04-28T18:23:04.491085Z","times_seen":2,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":22,"connect":1,"send":0,"wait":183,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/seabank.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/seabank.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1487\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-5cf\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fb1d10712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 42, 8-bit colormap, non-interlaced","md5":"a4ea5e627732180b9f7c4d1ae6c28d25","sha1":"675d858d52a0a67253fbf10b80388b5807258026","sha256":"ff37442401121b3907208d7085ff13bec864479e93a4e157e40d2c1abba65f44","sha512":"2c268fd2376de90c280dcba69c69ed48bfadee564a44d4a728527e37b090b283476b437280396fee51c2674c92fc4fbacc42d25903842fc0bb76c1b6598de665","ssdeep":"","tlshash":"ce31c9a390b9a5d60558a2e00cda0536f11cef1fc0e01b95615d18be6cb45e7cdfc850","first_seen":"2024-04-27T15:45:17Z","last_seen":"2026-06-13T01:24:50.298676Z","times_seen":1029,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/style.js?v=1.0","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/style.js?v=1.0 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-16de\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbadf2712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5854,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1126)","md5":"6174734545f4d0a24a22ae2f24526eaa","sha1":"969abdca32818ce8437a095b6c1e478d2bf70345","sha256":"d943adf3ed1dad80fb33a3380e56e5a584293f8d1694dbb6d5c5d1c6036ee406","sha512":"017d07cb8e391f853c7add6f7ecc503c09791b8a76a942bd51ecd55d203ab5d773bfdcc90b33f911ced9a4538f6d0e28f7141055449e2f9dfa29976b0cbfa955","ssdeep":"96:xEU393Bu563333G+3v+3tZYJWqr8xZMq038T4hfclwCBMkyZH:xEU393Bu56333R3m3s8xZMtMUhfewwMD","tlshash":"6ec1438ff251143505fb373a822f5b09af7f2a1a4945d124f0fb46a41f6c509a767e4c","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-13T01:24:50.401914Z","times_seen":2186,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/duotone/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/duotone/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"3883c-qSljHysS3IPdY4w5UGwS8ik28CU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\nage: 1194450\r\nx-served-by: cache-fra-eddf8230051-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 22614\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231484,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"713bc6f267fdd326c6579d5ff1e1343d","sha1":"a929631f2b12dc83dd638c39506c12f22936f025","sha256":"fc6d37f7f0f7ffdcdf714c54181fdd27911969e4737d3151b972d4b806e5ae5d","sha512":"9648284b6f49de754598e28aab54095a76d48c154b769051cd459dddf512ae1d59e5c114a581da298ff53d14edef1993b5c3c875cd384dadab10fe29c96b8b1d","ssdeep":"3072:b/GP5yanAhPUPQIBR0Js+XlS0/xATy6ZDa5aLGVEaXCt7A3C4jevbqjc4nIZqJ6/:DTsGYoohNBdr","tlshash":"5a3474e4b6bf2851a346f5c3118b9124b34ca21dcd5a9c1986e23cefd6d270dc6af18d","first_seen":"2024-04-04T21:10:48Z","last_seen":"2026-06-13T01:24:50.4079Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":94,"dns":6,"connect":27,"send":0,"wait":18,"receive":3,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/cdn-cgi/rum?","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 648\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=rKYW3DzZkWjhv3ELD1pghCu4VWMsOiztC5AjHDainRk-1777399087.958838-1.0.1.1-7wwntdJwUJFy1kxGkSW6gdk1KM_Pfl8.wYzdJGWOX7yPiyMvKSCY2COw915TgL9rzYnDIGqncTDCdGFoPJat1pAK4jC3rcYvkLxOPoyiv5veZh86j6A8JIi3OQBc1MeV; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo; laravel_session=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%3D; cf_clearance=vynNjHivtu2.Ztp1y9jln_2fmwCEh1MUm8.zuZ6KP.Q-1777399087-1.2.1.1-d5pwSYDwjKtqN9JbVaRv2zZHzxTvUIX6IC09qaivM8Pn5zHs7J02JdDWVh1sdBpvmdTdzsQdmaGAGI2FeFH.tPhxq52qLm_eJyp.bVITlCUHP8fU8NKKuTFcgKF4iWz6q2IxUpNCn78vRB0IaKKODPO2QQMGuaRxdACBbAG42OGWj67mLiUPvQyXiymwSBkNWc6RJbXzI5Ao5X45eBxorYQAWrvDIpwNhzEBUOuiteHA1CmuG2Ozu4eiZHTJxe45AREaHT5N3I.pX4p_hjF0jpYPCbcVogbizn47UtTYJNmZcaLkJANZ3EOkJafonMzydt0XTdMhI6.BgvsNvtJTmg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":648,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":2476,\"startTime\":1777399083998,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"b00f4d39-205c-44e2-a3d5-d78c9562e3e9\",\"location\":\"https://toto911mania.cyou/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":21,\"domainLookupEnd\":86,\"connectStart\":87,\"connectEnd\":106,\"requestStart\":107,\"responseStart\":983,\"responseEnd\":1034,\"domInteractive\":3198,\"domComplete\":4638,\"loadEventStart\":4638,\"loadEventEnd\":4647,\"transferSize\":37230,\"decodedBodySize\":169416},\"siteToken\":\"a1b7ad5596174e599314054bf1d3932d\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://toto911mania.cyou\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 9f37f4104fa8712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T03:48:59.088436Z","times_seen":16375574,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/97uahxiqZRoncBaCEI3aWz8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v15/97uahxiqZRoncBaCEI3aWz8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 13:57:56 GMT\r\nexpires: Fri, 23 Apr 2027 13:57:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 446411\r\nlast-modified: Wed, 14 Jan 2015 22:48:52 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26572,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26572, version 1.1","md5":"845280fbf7cf0ca7e186e0b68356ae0b","sha1":"3e37848e9b9052cdad47a551d55bebd4cef073b6","sha256":"d729f0522993e04c4463a7ebd01694ad369f6efd78681f270d98afba78aeafaf","sha512":"8d79528c1ec8464544b19df1416690213e25843f817ffac7e996a2ca1dd586980fb7f98fcdd30fd0b0618650caa41696be0a9191ca9093eaf951a201d1793c2e","ssdeep":"768:2SgKX9C7dZgS7QTcHOhQvFnH5yTSDlTzRnmLF:2SgV7QTcHeQvJXR2","tlshash":"40c2e111b56d6308d4e4a7346d0f153e8bdb8e96e1ebeba7d1224e6182479ca8ccc374","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.333182Z","times_seen":1902,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":161,"dns":1,"connect":29,"send":0,"wait":25,"receive":1,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/7m8l7TlFO-S3VkhHuR0at9Ih4imgI8P11RFo6YPCPC0.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v15/7m8l7TlFO-S3VkhHuR0at9Ih4imgI8P11RFo6YPCPC0.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28548\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 12:50:07 GMT\r\nexpires: Fri, 23 Apr 2027 12:50:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 450480\r\nlast-modified: Wed, 14 Jan 2015 22:48:57 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28548,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28548, version 1.1","md5":"1c2236df616e20bd4894a174fb2d5225","sha1":"c6e64be68b173f9d89afd3510f6f57d42296d981","sha256":"dbba47796ddefcfa1570846cfb0787d2871d1db17db1b8ed5c821ceea061b489","sha512":"3e81edb83849eb3ad9045c450880ce3cf59db8469d63d3c8d6a8ebb3ab691087bfd147f9023440405af996c35e4f0392bf0fc8d9dd85b0b7524cd8d4f340739d","ssdeep":"768:RfXipjanPRICmNfAeAlIHbIp6i/Ww23zlK4qO0UJP:RfXipjGPSN8lIVw23zlK4qO0Ul","tlshash":"63d2f1af26412c03ce771df5cbb492612b1eee15da3d91eb9d9438279b0a4c860243f6","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.468027Z","times_seen":1809,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":16,"receive":10,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/tabdrop/css/tabdrop.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/tabdrop/css/tabdrop.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\ncf-cache-status: MISS\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\netag: W/\"60c6c4e6-cf\"\r\ncontent-encoding: gzip\r\ncf-ray: 9f37f3fa3bb1712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5c0a4a2c86225279696ea35c79bc4662","sha1":"226b8a270b730dc13f15e83a1c22a176a34e5d97","sha256":"89e825818fc01c1089ec415c0619dc547020f8a0af119471ed2cdb5edc2b614c","sha512":"494b77604377a26ed09b7f3f7ccd9d433ac85a8e45979d0bfbc710c80ccb9f327e09daebe38772952862ceaffa290f8ebd9b34a898b3bfcf6c38901355b7ea08","ssdeep":"","tlshash":"48d02349179565874785577f7d3b85cb412ef145f44f019dd1054670c44484b3095d85","first_seen":"2023-11-04T12:19:53Z","last_seen":"2026-06-13T01:24:50.315174Z","times_seen":822,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/jquery-2.2.4.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/jquery-2.2.4.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jul 2021 05:30:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60f11975-14e49\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fa6bfa712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"b354cc9d56a1da6b0c77604d1b153850","sha1":"a3d8479f4d4e39b131bc9a53bbf53d1fbaa23732","sha256":"fdce77a6d0053f32d231518a84a71bcab5c86045ed52369da00b89d4284aef46","sha512":"b6dcbe11a0f90ef61a071fdf7d8c637f95fc77969cffda9f291772b4fa2c2f9020eea2916da6f1113d746afeafbf592d0db79fb2f2f5400bc0a0fc10a066ba98","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a98Q:v4J+OlfOhWppCW6G9a98HrU","tlshash":"1783c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:06:18Z","last_seen":"2026-06-13T03:30:02.406011Z","times_seen":8527,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-24d.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-24d.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5662\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-161e\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3facc8b712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5662,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"68f536efd4d9cf08d6edcaf5ca4d7ced","sha1":"a4771384bf6e12cc4737cf2f3bbabe27aa503e09","sha256":"df5bfec8fd98e9195fb9f02960c1f2a06deb9f024dd04801a45b772feffbf5dd","sha512":"60e03089e2e87368b1af8e759e5f197b542388b0aa760d51f24a244504450dd4f94ec1c3b4a628eec42437b5000ce0caf7eb5de0af362bc5f495d60c7ed929f3","ssdeep":"96:I1BKRCSc/BDLJv3QNwNpaW/5aPmDS0wZtTWnBS7Ow3OhwFWBtoDxzD6M:9U5D9vANwf0sS06tqnk7bYPBto9yM","tlshash":"6ac15b2eb458bb0fcde8d6334aa9f584bc1d9d980752ab672c504899bb58877a887200","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.401337Z","times_seen":1847,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/gif/btn-prediksitogel.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/gif/btn-prediksitogel.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 637958\r\nlast-modified: Fri, 17 Apr 2026 08:29:14 GMT\r\netag: \"69e1ef5a-9bc06\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qh6iYNDKxkwaOlMNt9oauOz2w0fRXopNaYR%2BbyOUemhoLqL%2FESE%2FkvI%2BBZX%2Br6xQtLj8EJM%2FCP0jMhmxxNJ7YqmOEV9DhhBboaRmXBEBgReNgfL406quo%2BTVUXs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f4101afa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637958,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57f7f7478c138d8d777447c678959469","sha1":"5707bedd4cbdf2703a012af03f379e2c6129c2cc","sha256":"5ab4967cf3ef1c97c95713b4ba797f5a6c5957a5c48f0510379d62742c52683c","sha512":"8e04a645a096398d1bf63dd3e880beb706d1e8ea826bbf5d6cb2c32ea55ef97521e80361b1b3030f6c5139b48810a4468da9225752f695e63a227b394c66be51","ssdeep":"12288:KwJqvEv6zkK2hJIy35CCNYdKcqeijHH6ymFoyFjJKTXqSB9bAl:vh6HYt35CaYdl37CUjgTXdba","tlshash":"76d4338c9bfa8ce2fb2964fb5d405c4bd197471b2a201ea0120d70f43966877e7c66b3","first_seen":"2026-04-28T17:58:37.427677Z","last_seen":"2026-04-28T18:23:04.464195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/gif/btn-rtpslot.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/gif/btn-rtpslot.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 358992\r\nlast-modified: Fri, 17 Apr 2026 08:29:15 GMT\r\netag: \"69e1ef5b-57a50\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZQ%2FGTiYWCA8oju4I1rxPbTXdvl%2FWyemSlGNee0UG3RKgx5Z7o1AgBQ22VDdA8AebwiIJFZFCZF9ASi9Jr8qcHCHXO2BaxlC5WlATW3MnZJ27sKkvdKnre0Ma%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f4101afb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8fd609b5b99f508e69f57cb01f942934","sha1":"a92ec84b95c3fc77c80d36d4245e139ca84c28ad","sha256":"8b8103b4ca13bd29d4c00fecd3fa4a1a2a32fb44b6787df63a3d011984224da2","sha512":"26b19d3cd3f6aa5598d59326d6689d028fd7f42de2f97ed50b82b9cb97c9b0ac64719e45db2fe8f76e056c69274e01380294a0e7621fbbe87dbce1504033ec63","ssdeep":"6144:IV0QHM7VSoR7KjT9hAUuFHbbObeEgqOYMe6WZ9v:IpHM7Vf27Av7c99tZ9v","tlshash":"ad7412062bc612f0e688a6b7d5942438feb70f57c8e5604afdcf64bc6f511a9e817123","first_seen":"2026-04-28T17:58:37.428566Z","last_seen":"2026-04-28T18:23:04.469152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/nivo-lightbox/css/nivo-lightbox.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/nivo-lightbox/css/nivo-lightbox.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-121b\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa4bcd712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4635,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (343)","md5":"a47f8f8621ed29c2a25f14ef08ae4a6d","sha1":"a4148e7fb99f60c0d37a787f2aeb5a98f8ab9310","sha256":"4ffdcb40550fad3fd4bfa401637be283e8e5b2738fa4b8745a8d3d5fa2d42425","sha512":"49ecc0ae0303474b285ab26be003fe743203437d8f756b5273366ea219b2344fb1624d02c018bd1c62bea95c327c4ab8a9ba2e24f8556dd53567f0fd8e0ba0d2","ssdeep":"96:6QUcgp466oHNUcg/SVK98qRlNmNtNzLcaNnTYXiN92bdxJ:cp466biqr4DZXC","tlshash":"22a1071b2702104880fab216a2c4cb781f3cc20bb8626caf7386d51b6acb5dd5d57ed7","first_seen":"2024-08-20T10:52:52.92478Z","last_seen":"2026-06-13T01:24:50.332592Z","times_seen":828,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/ovo.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/ovo.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 4578\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-11e2\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fb0cfb712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit/color RGBA, non-interlaced","md5":"9a8ceefca77b6a4f356bf139e59065b7","sha1":"fecb95c6ad2fddbcf2424b60a31503917c1cbc02","sha256":"71dfe3342d07e446916111fed9de1724bdde56c963c1b2573b7ec643e9f26e50","sha512":"eed75a8454ae4b3f6b926a1fb64124c1308f053d77c7d797767093a13430145cfaadbbfa4c85f971cf0339150077253a4b261f4d7cfd5d986fd854b7172981d9","ssdeep":"96:mZYR2M5uAeJqRaQ8IiwJ7k64Hx7iWtwopCUg2sl:mif0AeGaH4ivWC5g2sl","tlshash":"83919fc6eed04c4326afed21d3eda07967474c98dcf3b5623cfa88001d3a29446e9497","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.478638Z","times_seen":1872,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 18:02:24 GMT","end":"Sat, 04 Jul 2026 18:02:23 GMT"},"fingerprint":{"sha1":"2D:61:6B:E2:1F:84:60:5D:3B:D2:33:18:D8:BA:56:38:DC:47:29:43","sha256":"3B:55:23:65:A9:74:AE:45:C4:76:18:C5:04:CB:13:36:94:A3:98:2C:4D:13:F6:B1:B9:6D:6D:17:7A:28:CD:C2"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:10\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: 198aed3e764d8909fce8c96e253655fc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-06-13T03:30:18.357117Z","times_seen":15124,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":65,"connect":2,"send":0,"wait":2,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/jquery.fixedheadertable.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/jquery.fixedheadertable.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-298b\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbadeb712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10635,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10207)","md5":"406edd97a8850446d2693ef306af0708","sha1":"bd4996afdab1f18893ef89c3281c55e6585f334e","sha256":"991994866beb5e90d2205f4c5d4a757ddd38c6399386335991b260a89d857fa1","sha512":"493f04e96c9ead6dd640cc2a8c53e4aa3b43171c7dd51a4eabfce9fbcf00c51fd9d2edb1be40e6dac6ab6f3850b53234f177bd232404ce70ff287c11735f7d8c","ssdeep":"192:J/PBMlQxEuOaOGWzw32xilOXrPN7pOIN+5Mfj9SPHwjwTuv0vS2QeON:JBMlQxEuOaOGWzGEZrPNdh05NPw+S2sN","tlshash":"9b227195b3f93192c5fb61ba59fe014db0214d37a74b44b0b1aec1b81e70d8d22b9e2d","first_seen":"2023-03-07T23:34:28Z","last_seen":"2026-06-13T01:24:50.34762Z","times_seen":2165,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 10:05:58 GMT\r\nexpires: Fri, 23 Apr 2027 10:05:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 460329\r\nlast-modified: Wed, 14 Jan 2015 22:46:57 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26528,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26528, version 1.1","md5":"b20e0cef1fd0ee15a5fc0d150d4c9672","sha1":"7bef9051bf8ecdf269228c6e743dad5a8172aea7","sha256":"47a6d754139b198b90326c9ad8c22bd5e2ba5e2d7e2eeb443deed603255a611a","sha512":"cce8eb93332e18c5d4897c004ea1241f012cfa17da4f05ce87b3246e56274f9d561a4c2b49bada58f1d5d1d8f17db5a448e4bee78c0d8e3dd9a5047442d05b4a","ssdeep":"768:+fXipTa5SqjK1O4v/B7ddk/IxEjeRUVC8cy5zIQaqK7nP:+fXipTwf8/xc/20lcbP","tlshash":"e4c2e05f1bd2984df671483cc2bf5aa9f18053eb13ea7a745f925a1c22a15d50a032e3","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.324313Z","times_seen":2257,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":162,"dns":0,"connect":27,"send":0,"wait":25,"receive":1,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/nivo-lightbox/nivo-lightbox.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/nivo-lightbox/nivo-lightbox.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2090\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-1cfc\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fb9dd7712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7420), with no line terminators","md5":"a5896459ad6790d1d94eb2180e59e965","sha1":"e5d4b0ef3a929aa6e20ede86b024264a8cf2b473","sha256":"65723a3f6bf46e95bd82bbbc3f986c0df44ad1b4427abbc3fa252a53ff40b4ea","sha512":"de291f580572eacf236b4b7a51824e06cabce1f0544a5e2c7edd60f5cc2716757eee71069a1dccc42037d1704e4433e732469c46b74ea690911010cc6e1f50b4","ssdeep":"96:RwsLo8zljjmeC8CVZfOTfqjf61R9WTE6F67A6f8r6Fk4zzdtMTnO:RwSPNPcfOTfY61zWAAS8r6TBtMTO","tlshash":"57e1420db351525046ef3567211ad334276a86ab8c41e0b6b36cc4d7a7ebf181d33e6d","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.334902Z","times_seen":2402,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /@phosphor-icons/web HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 54\r\nlocation: /@phosphor-icons/web@2.1.2/src/index.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9f37f407fc1456c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":356,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T03:48:59.088436Z","times_seen":16375574,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":22,"dns":2,"connect":1,"send":0,"wait":37,"receive":7,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/indicator.png","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/indicator.png HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/assets/css/cu/cu2.css?v=1777399084\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 2957\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Thu, 09 May 2024 06:29:46 GMT\r\netag: \"663c6d5a-b8d\"\r\nexpires: Thu, 28 May 2026 17:58:07 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f4090ec0712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 51, 8-bit/color RGBA, non-interlaced","md5":"bbad9d0aef39c55cba161ff5ab3c7d30","sha1":"f9f2e4b293fd67a108c95d221437240c810d67f4","sha256":"b7704daabf987a684873b073f895609ac0dead3f8139dbd872434a8c67270e05","sha512":"1796b3d76b1725c15ea06a449290b871f1edc653cad9938b877e625cb8043f9d4cb9e93fb7494f37b823434cb7c3acf3c2cf508bde28a11c48c233424f7688d4","ssdeep":"","tlshash":"6451d809dd149c418b8efb449aea9252263b1bd05b41e51abdfdd413b9700b4c64ddc2","first_seen":"2023-05-23T00:23:15Z","last_seen":"2026-06-12T21:54:15.784101Z","times_seen":990,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/bootstrap/bootstrap.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/bootstrap/bootstrap.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-7ba2\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fb9dcb712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31650,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31650), with no line terminators","md5":"d08775b7d337d5f37e3fb102f1a8a913","sha1":"6cbd6f79def44d7e96d933a17967cd2afcf9ba3c","sha256":"8ae9a41def07afb4166b08e3143071437d1867e5f26e6bd907899a8b50bbafbb","sha512":"458415d96f8a83f130fdae57e3322c75b67269f4eb57494074e06b757eced0730c58ca73a8c65148c19b9126653ddcf66e3058426b921e1bd51c3b7369a5f05e","ssdeep":"768:poBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:qAr2MRCqc","tlshash":"b7e27446b230316107dfb2e5515f020b723a6a6dea06907c38b999f53db9c48727bf39","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.289888Z","times_seen":2510,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/fonts/Muli.ttf","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/fonts/Muli.ttf HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 49008\r\nlast-modified: Mon, 14 Jun 2021 02:54:26 GMT\r\netag: \"60c6c4e2-bf70\"\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nexpires: Tue, 28 Apr 2026 21:58:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f4068b56712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49008,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 32 names, Macintosh, Digitized data Copyright (c) 2011-2014, vernon adams.MuliRegularNeWT : Muli : 25-2-2014MuliVersi","md5":"df7330254513d2fa2f4c1e9ee98cc6c6","sha1":"aa2edf77d86fff82790b846917772837828e4902","sha256":"45acbaae00fb0cfa8413b582cd4c0dad9653c78a051a7215205079ccc7c7e233","sha512":"7b105ea2d7f505435519444826958f064ab7d96583f8fa9a963b9285054452599b117957e4015e36125d749fc51863ac55341d04e0317d3d36f2d93e4c6607f9","ssdeep":"768:Lft4a1riuqGu3suyskhzsKxcLgmPPn9tPMZWQKmEcBWzoGHJ/VpwWfgzCjobOSjD:9gSJyvXn9tPMWcsbzft65qe","tlshash":"d3234b02a384060ed5154f7c8aa4a7da67dafe132951cb0b73ccef6cc9521e44a57bce","first_seen":"2023-04-05T18:16:08Z","last_seen":"2026-06-13T01:24:50.372896Z","times_seen":2422,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/oOeFwZNlrTefzLYmlVV1UD8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v15/oOeFwZNlrTefzLYmlVV1UD8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26516\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Apr 2026 00:41:13 GMT\r\nexpires: Mon, 26 Apr 2027 00:41:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 14 Jan 2015 22:48:35 GMT\r\ncontent-type: font/woff\r\nage: 235014\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26516,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26516, version 1.1","md5":"243a8ea4b8c5d016075ca4afac4da8f0","sha1":"9960669872efe96f93bb9e96336a8c4d1e8875ca","sha256":"f5f4e498ea276a699582ac4b3055ccf6eb9cc9a7e4050e4082b66117b5136653","sha512":"847bbf4ba837401bf5cf5c85e1ca7d551c32fc7cbf9060595b083fe0b80f623176e527758a94267c28fe32a6d4335332e09bd8cf2058dbd87ba680a7c783b152","ssdeep":"384:e4L/3k+XDeV2aoqGmqK3oA+4b5L7mxZdhykCtC0nb+gQuijzo0oHBEfmY:egPeV2aoqTqK3t+o5FCUbs9jzDfX","tlshash":"3dc2f1c6b2a66518c3d87336483f4d06a8a5b0ed16e3f978afd6a480b7dc1d7ce0004e","first_seen":"2023-07-28T12:10:20Z","last_seen":"2026-05-19T08:05:52.840125Z","times_seen":11,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":185,"dns":1,"connect":27,"send":0,"wait":12,"receive":1,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/fonts.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/fonts.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 09 May 2024 06:25:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c40-c19\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fa4bc2712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3097,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"a747a96a40f0ff24cd9b22280dbe159c","sha1":"2456960193c27391c70fdc70d706d9ac389ce8dd","sha256":"2f03afce916625a8d6dc603bd5b678668051e0f16b992e6a816c1cdb216a99c1","sha512":"5aeff76275674c3c77e9d7c2bd54515e1a22fb04c6be9a3532370872d0b0bf9a7f3d1e543eabbf7900f3c654939312cac333aba4e54da11f454a0640e0d772a1","ssdeep":"","tlshash":"e451755901dee65a6aa30ac73a8ab704fd1e112a246cc553d52c7cbc8cd362f63c472e","first_seen":"2025-12-04T05:42:45.87578Z","last_seen":"2026-06-13T01:24:50.382541Z","times_seen":819,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/maybank.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/maybank.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 3174\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-c66\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fb0cf8712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 87 x 23, 8-bit/color RGBA, interlaced","md5":"9090309db1eed014753ae3b858b4084b","sha1":"a697395e709e693789bd82b2130b3c2ad3a4aa48","sha256":"09f4d88fdb291df0519ef0bf158f3308c71fe9a921e2cf11bf990bcf0b8380c0","sha512":"11f72d37a863239e5cf8f76b0c424681ca68676137fea4e88774bed3e0ed13230d3501ca94d065324cd34c8388ae6e9c96fb2b5c76090cab0f9851bd3287f654","ssdeep":"","tlshash":"53615c7ff9a54e908f1af3b125dd28b30b65c610b9e0fc45b9c9d06229641f065ccae3","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.392548Z","times_seen":850,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 07:54:05 GMT\r\nexpires: Thu, 22 Apr 2027 07:54:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 554642\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-13T03:49:15.429438Z","times_seen":209524,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/cu/favicon.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/cu/favicon.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=rKYW3DzZkWjhv3ELD1pghCu4VWMsOiztC5AjHDainRk-1777399087.958838-1.0.1.1-7wwntdJwUJFy1kxGkSW6gdk1KM_Pfl8.wYzdJGWOX7yPiyMvKSCY2COw915TgL9rzYnDIGqncTDCdGFoPJat1pAK4jC3rcYvkLxOPoyiv5veZh86j6A8JIi3OQBc1MeV; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo; laravel_session=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%3D; cf_clearance=vynNjHivtu2.Ztp1y9jln_2fmwCEh1MUm8.zuZ6KP.Q-1777399087-1.2.1.1-d5pwSYDwjKtqN9JbVaRv2zZHzxTvUIX6IC09qaivM8Pn5zHs7J02JdDWVh1sdBpvmdTdzsQdmaGAGI2FeFH.tPhxq52qLm_eJyp.bVITlCUHP8fU8NKKuTFcgKF4iWz6q2IxUpNCn78vRB0IaKKODPO2QQMGuaRxdACBbAG42OGWj67mLiUPvQyXiymwSBkNWc6RJbXzI5Ao5X45eBxorYQAWrvDIpwNhzEBUOuiteHA1CmuG2Ozu4eiZHTJxe45AREaHT5N3I.pX4p_hjF0jpYPCbcVogbizn47UtTYJNmZcaLkJANZ3EOkJafonMzydt0XTdMhI6.BgvsNvtJTmg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1797\r\nlast-modified: Thu, 09 May 2024 06:29:40 GMT\r\netag: \"663c6d54-705\"\r\nexpires: Thu, 28 May 2026 17:58:08 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f40f8ede712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c4f28b37764b4c8e186a739e2ba032a0","sha1":"9b82f67cb15467acf7a2c1ba522d7ea8c1d94e59","sha256":"a1bf195cc623002e0ed86b3fde14412b7c490f7aa651f29415a29217d147ec37","sha512":"ccdf39c39797cbe91614cbaaea51b306fc4096af65c2b86ff2a24a3eba8ba9bdcfe1c71646c65e0133bb9e0deaf50305d6d861927811550279b1fc3123ddd6c2","ssdeep":"","tlshash":"b231c924f5909c935634e54000f9d1ae8d569c90ed92f0163dcee465197c1b681ab1df","first_seen":"2026-04-28T17:58:37.44035Z","last_seen":"2026-04-28T18:23:04.486293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/linkaja.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/linkaja.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2146\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-862\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fafce2712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 25, 8-bit/color RGBA, non-interlaced","md5":"2d5925ab422101ea8f19560ed06cc097","sha1":"f749f359d92005a41ffce77b9a2d8c5888670f6c","sha256":"7dfc635cc62e740491850e4bf48ecf3cf0cf21b248f9af8536abac4157156888","sha512":"8f9205a7ba24d863d4f65eae2bfd8159e19a06604c7af5df15dd5548a553aa9a7410bee56ca52f3ad927a6eae846d3ad12864dbe01364004b0a5ced52e518608","ssdeep":"","tlshash":"1c411a9fe804764264a9964220de6423ec4380816294f075acdfd82f57bc4fd1d0b6cf","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.472147Z","times_seen":1821,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/bri.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/bri.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1040\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-410\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3faecc0712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 21, 8-bit colormap, non-interlaced","md5":"6dc0d7a52a5bbb2bbf4fa766d445632a","sha1":"5f3bf4eeb2065a5ada283143a629b5b6126350e5","sha256":"5cac9c4ea7470f69937f3e0c66643af243f022ba1d0d1b92ea0b891be8d3e708","sha512":"98cad2ab03707adc5edf39f059b76189db33e6fc89bb8f1877e837cdf7f4adaca09854cd7439bfafafc9be6c5f34f47b9a218b88718acbcd34b925c037c2d715","ssdeep":"","tlshash":"2811d8ca3912bc8cf07c485000a0621efb5c01e009137c26eeab5d5c54831054ad0e1d","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.447591Z","times_seen":1879,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTOSYD.jpg","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 17:16:33 GMT","end":"Tue, 23 Jun 2026 18:16:28 GMT"},"fingerprint":{"sha1":"E9:BD:49:DE:5D:52:F1:D1:4A:EE:03:E4:9F:9E:C5:88:40:61:DA:51","sha256":"FF:F4:E3:27:0B:3E:62:20:1F:90:C6:F8:F0:77:89:A1:23:EA:5F:E3:4D:27:1D:36:8C:82:BD:18:87:D0:F4:F3"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTOSYD.jpg HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://toto911mania.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90323\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Oct 2024 08:12:29 GMT\r\netag: \"670f756d-160d3\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nexpires: Tue, 28 Apr 2026 21:58:07 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9f37f406cde5b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90323,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 840x480, components 3","md5":"8db56736ea051fcd404982815367ee0b","sha1":"b5056f17ec73b72f7f6675273ce1f28b6b4d2b46","sha256":"4e02417535468c9d74f33333ea8aa01ee1921f11cf19de61d1f9b1288ca9019c","sha512":"0b82f0c5ea273bfc4f4b5bf6064f17b4881bd8ab384b39b423d1f2a3ec9c5f29dea536aad9a24bddff9c3f89109d26c3ac07516a5c2066f626ee09abb5be2b0d","ssdeep":"1536:6QOQkYEy10jihMFSRHVh+eh58McnIJjB2FH/lq8gnkx38rQIW8BbeV/H:6QOQkYEy10mhMFSRHHb78382F9JxssII","tlshash":"e49302afd1b007c6d8b052b1ae3fdc4de001a51ce6a6a59ff6af45e954dd47c0a90388","first_seen":"2024-10-22T04:17:53.660679Z","last_seen":"2026-06-11T20:23:38.45946Z","times_seen":1516,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Apr 2026 17:58:07 GMT\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-06-13T03:54:07.258123Z","times_seen":7742,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":207,"dns":1,"connect":25,"send":0,"wait":44,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/cu/cu2.css?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/cu/cu2.css?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 09 May 2024 06:25:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c3f-17e79\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fa5be6712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97913,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f431d6f39ecd022e9aec03295c07a4be","sha1":"a99e30f392da52d4e883f2a5e68aa8fa289d8c1e","sha256":"4e0d6405ee9bfa79f0bc2fa6cb06a81c884192872c75ca34c4b2d6256c3180c9","sha512":"df984ddd4ece4d6bf105b180e9caee9316b1f90556369e15c8a27a4622fa76a15c18a26fd259b504456f9cea9d7c33a408bd40df9215ee7828dbd172029fcb21","ssdeep":"1536:Va7Y47wL+04yISDEonUJLtMrnbsAT2MAM+MzMSMQMdDMrdMr9MUMv/zkSSA:IU4J6ISDEcAa2MAM+MzMSMQMdDMrdMrk","tlshash":"02a355e577a91d00702bc5a976829be5777c9002d50acdbcbbfa716cae4dac84133b4c","first_seen":"2026-04-28T17:58:37.444036Z","last_seen":"2026-04-28T18:23:04.479419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/feedback2.png","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/feedback2.png HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1180\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Thu, 09 May 2024 06:29:41 GMT\r\netag: \"663c6d55-49c\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fa7c07712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 206 x 32, 8-bit colormap, non-interlaced","md5":"76fa4b2588a14d5e8c62f70f7263d62d","sha1":"8f2510f7d96cf7a1756ff8dbcafc248bcafb31e1","sha256":"639775068932c1b628a731e51f57a420b6006929bf08058d1dd628b2b0aa1e51","sha512":"69251210bbb555159087994e5c28a3552118279bd93ad8aacd6b95a99b1331c9053653f2abae5ed064e29c23ba26b3ec283577af83d955d04110b28556aa080a","ssdeep":"","tlshash":"8e21cad9ff40d833dee1874c05b05201d6c284539a2f266524dfc8a856e72d9fd7db91","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.342081Z","times_seen":2250,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEgOL5U4gyE5r7XdfLVVvUMPpnXsOaLrJIrD6Vy_-VRTJvTFmdnHk0Kxp87aGX57GPfL02LYbvU\r\nlast-modified: Tue, 28 Apr 2026 11:15:12 GMT\r\nx-goog-generation: 1777374912334459\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 103475\r\nx-goog-hash: crc32c=jR2mCQ==, md5=BIdREBC9AdlP+d9gnvHtYA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33374\r\ncache-control: public, max-age=28800\r\nexpires: Wed, 29 Apr 2026 01:58:07 GMT\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":103475,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"0487511010bd01d94ff9df609ef1ed60","sha1":"bde9b1e9825cea356b368b82386df73ba3714a06","sha256":"b26afa46f8e5efb3e60be7a5a4abbdf6470c8bf8ab90041b93670892bc1fbd5d","sha512":"d0881ca8f8b0094b43fb55cb916907c565aaf98675df63a2b0c7ea3f245198e61fd50a9387f48a9224c1395428ac84f5ac92ce1bf1b57c28a80d8a9bdd734317","ssdeep":"1536:E5CBuRri7jvzYY0WRcjbueuj4LzBpL2XQmwpYU9BfIU505CG1A:EoBuRu7Tubduj4ppjF50Bq","tlshash":"55a349d67282b03493f786e7a07f6212b7391918740d8420f17ced6a396a987d177f2e","first_seen":"2026-04-28T11:41:36.247882Z","last_seen":"2026-04-29T07:21:21.473009Z","times_seen":117,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":68,"dns":71,"connect":1,"send":0,"wait":13,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/defaultTheme.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/defaultTheme.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 May 2024 06:25:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c3f-649\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa6bf7712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1609,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"096e1a4593cd1657184db0c09bbd6938","sha1":"ccc0688d0ce0e0f8b93e141e912d4ba53fd6f1ad","sha256":"404e24f0cf7b62268f97128b89aabb41cfe3377f767bbbaf9455457d3e7b7f54","sha512":"c59d36cf6bf9d5b56af1ac7eadf167de125d229a911b5a65cd2fad03c83b7570cf474c58678bf83ca3abb809bd7d996bea4f8a6045fba0102d143ab407fb01c3","ssdeep":"","tlshash":"17317845dbff3803d05cd76da9dd69ba89344327a7970cfdea90c50c1b4012c09a6da0","first_seen":"2025-06-27T11:29:10.501891Z","last_seen":"2026-06-13T01:24:50.310111Z","times_seen":827,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/situs-togel-hadiah-terbesar.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/situs-togel-hadiah-terbesar.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 170462\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Apr 2026 08:28:39 GMT\r\netag: \"69e1ef37-299de\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdZBu9I3Oaz0jfESJ%2B7toXSULLynavW9%2BmrO3GR5c7FmEHy3KtvsLXNN36xUS%2BZG9ObHbQBGfzrfk0oCp6gGdGQzucbhfQiqsP2UWsHKOh9eMdsXJFimuVhEx8c%3D\"}]}\r\ncf-ray: 9f37f3faacf53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0e3f7baeca87d72bf151fc16681c2b75","sha1":"de909241f62f784abe9ed2212aefd7623d5503fe","sha256":"6b848c55c982ad7293b01449c3ba951d06df680069b58b5f54f9cc2f2974c9d4","sha512":"68b071338d1485b679938b1a586cf6f5bbd38c06c0eaa5da45234200c3c54923b08d99cf4fe652f2a3662c03ac4ba10f5dd7085c0983edf1d04a6a51496a461c","ssdeep":"3072:cLxBbqJG7RdW3eJ0E9kWFOk5SYEQ6ooMrwnmD6NAYas:sBWJMEeJ0VWF9xH6hAwnbA6","tlshash":"c9f312d5a0092af9c1d7600f2496209bf4c215ccd23a8f93b8cd6513de76ed2e629bdd","first_seen":"2026-04-28T17:58:37.447695Z","last_seen":"2026-04-28T18:23:04.468079Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/jquery.cycle2.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/jquery.cycle2.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-5710\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbade6712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22288,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22288), with no line terminators","md5":"3981c014980610a347911b3eb292b722","sha1":"a19a589bbf0d0a607557cc93768fa68ec4d9b87e","sha256":"6b41e47a54aefc08aaa3678ed56f5689ddf69b8e8a48e9af8acc200ed0559fec","sha512":"a1e7501a56f8eb568e1c954104a2e0c382d2cbf9ffe386d1ff47374460156e1813374c69250ea17d5fd9f2c8d9d8734504c8782ca09af0b503d69efda13479e2","ssdeep":"384:dKoMqqIIaGwjZufVdJHqktq+3XlTXdE4VzExmRCqfL:PqXysVdJKkNTVCmP","tlshash":"3fa2b728b249396295f328f8733fd00b17f12d776950d6a170e2c7c96e74946b226bf8","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.457993Z","times_seen":2382,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/gif/live-games.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/gif/live-games.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1176828\r\nlast-modified: Fri, 17 Apr 2026 08:29:17 GMT\r\netag: \"69e1ef5d-11f4fc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTnFtZBVEUqZYipxA8HPKpwm6ou27vuq39ZrsI8k3lJwy4IaqVq%2B3097D7C%2BZAhPfFWo3fNFCf1shLcasZDV46xQDUFp%2FedHONQcbsHoJUqo243DjaToSmJzrcE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f406698f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176828,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d228f6ed89a27bc9162c77649ed1638","sha1":"569312fede3ee104176afe7a06623450e59cac81","sha256":"28757a7464dc1546b4afbaebf80ebc9b3966ea006f3387a6a35451a854eac595","sha512":"1cf5b7333682898b13b12e7926476e49470abb82d688f0de1dec8b2742bfbb6c69bf36a16f20b984a12a71583e354250e104f20b1533e571fcbcc5026009c8ef","ssdeep":"24576:5bhhvWiWApmLpQj1zgNr8cjn4wxydTYohy8FMW48VwxDQA6r/Pj4:xhhvWiW1LWjCrxlxsJyuixZKM","tlshash":"572533bf4acb2424e9fc607e24047919f91f881fd4a25e684db334d37db409a9a1b6b4","first_seen":"2026-04-28T17:58:37.449297Z","last_seen":"2026-04-28T18:23:04.503349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-hongkong.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-hongkong.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4709\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-1265\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa9c4b712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4709,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"606bef132f2c25652dd62b4e7a5ff71e","sha1":"2e75d728149ae3c864f8f2b827841697ebd5481e","sha256":"8b2f204a6ecba604871a339562709f1194ae9ab0a2c8ad61564e4788682b9f2d","sha512":"4a27302f6ec32081e6bc4470c7060451c73b81fb3ba99f387d7770c8848de966855aac85b9008481389a57264a484aa45b7d2e6d1c932d6d444172606ea66708","ssdeep":"96:tHEgHiDK8H0HbHtptQQWnOAEV6OIyNhQN6JeVyN:hXCv6H7WNU6yNhdJqyN","tlshash":"79a17d94436141e07e2cff39a9524e390a805c2d5d88e36fd31f3f84247b5baa824fa9","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.426675Z","times_seen":1785,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/permata.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/permata.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 6567\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-19a7\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fb1d0b712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 102, 8-bit colormap, non-interlaced","md5":"f5f8c69e95909040ed44250cc3b86c35","sha1":"e333b452f22bcfd8368091118e301200e7f4f2b3","sha256":"bd3ce223941f0e46a5f2bf3a048f36d65b57a595d3dfb06762799d4c2b37121b","sha512":"3e58bedf161fb95bd4bdf89f95d224d1d68ce0d14de5556293074d188104dd75b4df27a8c84def1d61912b703e2041c0be82b25036124bde460f7e00c67781fd","ssdeep":"96:rV8AamRQJAK73Mj+vuR1Mz31Tgi5NlPiuwPvMXJp+b1IU3SZVaw/sJUt+sxczRw3:Z8Cy4q1fPkPvMX+IUkVaEoUt+sxqw3","tlshash":"2cd1aeff3698bcfaec63ac58c330bdc0463e6c91643714789d19c9506ec5998d080e97","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.327937Z","times_seen":1131,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/jflickrfeed/jflickrfeed.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/jflickrfeed/jflickrfeed.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 650\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-5b6\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbadd9712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1462,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (425)","md5":"847c6b884e569004695666dd6e90fd0d","sha1":"0f83977484c914c85ba813adb9c46506baf4a83a","sha256":"796951855984fed308feec350d31ea2ac1382b2c6aec06412f9c33e1c13fe075","sha512":"1dd14e40e94dde8ab70b5d2e0293cda5f91376703dcc2d2a4b3174ffe270663a0448377c7b8334f2195222e8e3bad39d58e27314f4a59b077a26b8085bed450f","ssdeep":"","tlshash":"623122005c51a1fe16ebb7766d9f13380f318301c868ea52a7e6c171687b1cbe573d40","first_seen":"2023-03-08T15:52:17Z","last_seen":"2026-06-13T01:24:50.320175Z","times_seen":2167,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iframe15.otomatis.vip/scriptnwl/idntoto.js?1777399086","fqdn":"iframe15.otomatis.vip","domain":"otomatis.vip","tld":"vip"},"ip":{"addr":"104.20.41.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otomatis.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 00:29:02 GMT","end":"Fri, 26 Jun 2026 01:29:00 GMT"},"fingerprint":{"sha1":"FC:D8:D2:47:60:66:BB:3F:EA:F9:C4:24:EA:66:4F:B4:24:42:B7:0C","sha256":"FC:91:6D:5B:18:AD:69:B4:28:D1:0D:E1:22:AC:BD:16:C1:ED:F6:ED:7C:80:9E:4C:FE:CE:11:21:17:59:D5:45"}}},"request":{"raw":"GET /scriptnwl/idntoto.js?1777399086 HTTP/1.1\r\nHost: iframe15.otomatis.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://toto911mania.cyou/\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: no-cache\r\nvary: Accept-Encoding\r\nx-oss-request-id: 69F0F52F2FFB293136008064\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST\r\naccess-control-max-age: 0\r\nlast-modified: Mon, 02 Mar 2026 08:41:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9921513079483474415\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: CAEQvQQYgYCA_NDqtuUZIiA3ZThhYjIyODIyZDk0Y2U3OGEyZjA5ODZjYjMzN2M2Mw--\r\ncontent-md5: rXNi6TjfHD3PoT45CKaiuw==\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f37f4065f7bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13919), with no line terminators","md5":"ad7362e938df1c3dcfa13e3908a6a2bb","sha1":"b019e82e59ca4c2655c5ba4268f3086685532fd1","sha256":"7299f2b20c82e43958b6ba588729b3a8b6999feb6b6f4ce683fbeadd446c2bb1","sha512":"3c1b9a30b9f18ba38d45b64270cdb148f47d51bad31dca8a3966aa1f20ea21995528e12b8d6060f76b206c5532003247a534d1f946af6fbb864aa8a0bc894c5c","ssdeep":"192:aoxARFx6JLOfqtQWNEDRlmhdOX37Ho0FN+6ixBKAWsRb8qRZOIs/3sllbn83750s:JyV6VOfqtQWaDLv7WDfuQ4f7hg3G","tlshash":"fc523499361087df1342af3a7f376948e16b8c81c94058def098ec096ec972dc5fa679","first_seen":"2026-03-04T11:21:36.405174Z","last_seen":"2026-04-29T21:29:37.480131Z","times_seen":29,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"iframe15.otomatis.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 03:03:44 GMT\r\nexpires: Fri, 23 Apr 2027 03:03:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 485663\r\nlast-modified: Wed, 14 Jan 2015 22:47:27 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26588, version 1.1","md5":"a84d4b00b169826c4aea77a8611b1e56","sha1":"aeaff41dcc5caac07876a3931c86456aefdbd54c","sha256":"37e9d63421fa7b235c859737c6c65ee2ed95d79e7c49be0fe15903de908c2204","sha512":"38a4e96ead988f3a05efe819a2e146e85d409767b58950b18c6d8ab21c951469925b6ffbcd365536e45b22a8349f17fd4532444ddb4d7b9918dd46f160e1244e","ssdeep":"768:Qpi/npNamCBc356emikPENrOSc09aV5bD6M:kuJC6Jsi4qrOf09arH","tlshash":"5ec2f11679532818f31717f01cabbff2522207ac4cbc2caf50a49451175dbba5bb05ea","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.393959Z","times_seen":2326,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":160,"dns":0,"connect":9,"send":0,"wait":9,"receive":10,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/fill/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/fill/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"14f3d-r7RKcT9NxSbiv/2gU12nv8/LRKk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\nage: 2264144\r\nx-served-by: cache-fra-etou8220187-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12152\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85821,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f0561d4b928f3521c1a3a66507052039","sha1":"afb44a713f4dc526e2bffda0535da7bfcfcb44a9","sha256":"555980683a582c1910a954648b4ae38f58d76e797f02bfdc2c5e817901e6d4fc","sha512":"7e1018b04408350683e5913ca90abe30976821b7be2f027af178b9635448d07f975c15965f400092f80c086324ebe51118ded29604a0b70b02fdc13cd0cb2218","ssdeep":"768:Tco1Z16hMNSpfiIxQ3c90yfeLIw89KePvx7N+jLTrWROx:Tco1ZkbRxP9d2cwWFvG","tlshash":"dc83efe8f7be1ad03341d1d0220a1632bb0d9324f986bc59c963798d71ea119d78e5fe","first_seen":"2024-04-04T21:10:48Z","last_seen":"2026-06-13T01:24:50.341408Z","times_seen":1762,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":173,"dns":5,"connect":34,"send":0,"wait":14,"receive":1,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 03:03:44 GMT\r\nexpires: Fri, 23 Apr 2027 03:03:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 485664\r\nlast-modified: Wed, 14 Jan 2015 22:47:27 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26588, version 1.1","md5":"a84d4b00b169826c4aea77a8611b1e56","sha1":"aeaff41dcc5caac07876a3931c86456aefdbd54c","sha256":"37e9d63421fa7b235c859737c6c65ee2ed95d79e7c49be0fe15903de908c2204","sha512":"38a4e96ead988f3a05efe819a2e146e85d409767b58950b18c6d8ab21c951469925b6ffbcd365536e45b22a8349f17fd4532444ddb4d7b9918dd46f160e1244e","ssdeep":"768:Qpi/npNamCBc356emikPENrOSc09aV5bD6M:kuJC6Jsi4qrOf09arH","tlshash":"5ec2f11679532818f31717f01cabbff2522207ac4cbc2caf50a49451175dbba5bb05ea","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.393959Z","times_seen":2326,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/css/shio_svg.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /css/shio_svg.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Mar 2022 09:33:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"621f39e2-97f\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fa5bdf712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c40ec89e8a103f2e51b90dce6047474b","sha1":"d90eaeecc694d94c5883004e05ebfae4a6cbe846","sha256":"e01ff4e0e870caee450fc361c0393c4caf42514432c9e7425da4268a25f2d607","sha512":"99d21e9206a85fcf389900b7b91b391186ee98ff8b5f89dcd0a6152d12b0070bf09d7c4f634e5aa9a5bf851c910f2b8483ed70b99de99535ec7c3f05a9c5eba6","ssdeep":"","tlshash":"76412961809a670349226ab065dff791eb197356236cf23621e73084bbedf4cb91cc34","first_seen":"2023-11-21T03:40:41Z","last_seen":"2026-06-13T01:24:50.37506Z","times_seen":880,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/vbulletin_md5.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /js/vbulletin_md5.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-1639\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa7c08712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2780)","md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-06-13T01:24:50.317211Z","times_seen":2214,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/mobile/assets/img/loader.gif","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /mobile/assets/img/loader.gif HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5517\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\netag: \"60c6c4e6-158d\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa7c10712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 15 x 15","md5":"bc1bcccc4a3342d2063088deae7d17a3","sha1":"a1a988f912d3e17a908945750b91b508672ccac1","sha256":"a76090f2d604a7e9bd429900001b367ae94f52d749fd0f94706be887d87cce7f","sha512":"08c93c3506f083bfbe9ba6d7f9824f871ca145ed9bc431c248d3352a05cf23db90ae2f39bdefa532e8d16f29b623d3d91664753ee471fb606a2b082b6cf791c3","ssdeep":"48:0zXKn2kC7TYJJ3C+gXfU8wzXKn2kCdf4JJ3CUgPfU8GzXKn2kPJJ3CQgrfU84Wy6:K62K4fC62rSYfU62q0fI62oGfw620ifL","tlshash":"cfb1980de9d0bc05458de9c92de7d43a1b1108508ee8eeaaaccec8568a18077cd2d7df","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.408735Z","times_seen":2349,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/slot-scatter-hitam.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/slot-scatter-hitam.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 540482\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Apr 2026 08:28:54 GMT\r\netag: \"69e1ef46-83f42\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4ldctcNWSB0iNPlxXnTB060%2BFoSSFbhhlthG6K120NujqLVsHphDpBO7oTqiVtpbqReESqKR5wfbb6Jkv7qwY%2BWKj0kQ3qdY%2F1z4Wj%2BQTL2XYUzq9vXLTLU7GA%3D\"}]}\r\ncf-ray: 9f37f3faacef3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"853edc7f18b8ae73a3af013f1f75e6c5","sha1":"b2c1f9dd7f06c6ce98c8fbd37017a63b2f653fd5","sha256":"61c83c90913af52a2730003a3b351f38b5048b74ca216b7ee0bb0d088530c8b9","sha512":"762ee2c565a0146a28682775b13e74b7c04305d78d9d6a8d40ddd676f83466bdd83d86ce3096808e0eaa536c25ab585f5cfee6c9a1103010988bfca2660d0ea3","ssdeep":"12288:ONJcm4PVSLufvX7JkfzWNujBbkSIgBkrdtWU+nS:U8SqX7JkiNeBirbWUd","tlshash":"15b4235f15989962ff726f727eef8ba0bc8863145380761de2b23844580f32e5d652cb","first_seen":"2026-04-28T17:58:37.455451Z","last_seen":"2026-04-28T18:23:04.44271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":969,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/photo_2026-04-16_10-11-39.jpg","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 08:15:55 GMT","end":"Fri, 26 Jun 2026 09:13:31 GMT"},"fingerprint":{"sha1":"DA:24:A7:95:50:2A:1F:25:7E:8A:10:1B:6B:40:E2:54:5F:6D:FC:DB","sha256":"64:E4:F8:7F:30:CE:91:32:B9:C1:F2:D0:C5:79:2B:E4:B4:34:E1:B6:C5:84:59:89:76:7C:2C:1C:E2:CB:1C:B9"}}},"request":{"raw":"GET /banner/image/promotion/photo_2026-04-16_10-11-39.jpg HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 98647\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 18 Apr 2026 00:21:10 GMT\r\netag: \"69e2ce76-18157\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsOrEG%2Fuxqz1f41U5BxwaBRssZ9QeBC9HfPLmFrCBr1%2BFkYM0DClU%2B9r%2FJYhA7MSIPrpLyWE5SkRwcA%2F2Qp%2FATJz1b31Z85iVW889nCrDSG2snodn3tw%2BiRMD5ZfF9bLu0HK\"}]}\r\nage: 3952\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9f37f3fb1def56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98647,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 840x480, components 3","md5":"120a903eceebdc7f594100bc1507e17e","sha1":"8e634070b60f24000cd256cd2fc8836c67a7620b","sha256":"9c3e09299685b8660c0578e665c6c9af573a8c7ef9692324767f27bdc326989d","sha512":"c71cc020ce71ae31c2b93391e5337d2f112dd5c8451e23e66efacca3d5f807ea0584ade46cf10cd5fd2accad0650d5a5d280e2294998dbde656ca40f7331daaf","ssdeep":"1536:dN8D2xU9RWXaCoIFrcjtIw3Kqyn6FthCaUjp9RIq8H/Bfz8Ip8CGfZJ9qLiXIyZl:dNKaX0IFrchv6Ln6FqaqZ8+E6nVXIyZl","tlshash":"cea312d827bdc931c1381b75e5c547dd9e91319ced43727e8e4894f8e4b02a1c0a9b6b","first_seen":"2026-04-18T07:34:28.078704Z","last_seen":"2026-06-11T20:23:38.470113Z","times_seen":100,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":23,"connect":2,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/owl-carousel/css/owl.theme.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/css/owl.theme.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-491\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fa4bc7712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1169,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3ea6896ea9e3b4da06cc4d865bc75c97","sha1":"706948cc46b52e5f68c531f79f647884a3f30a3d","sha256":"c91c5cc4707b835fd0f3393d3200803a7a1a5cb95a299cb10c9dec7eef0f7d84","sha512":"0869113272b6b1effc18ce4edde1c197ba0d378dbcc7776205a5597ff188cc017597fdb5aa49555d94f4320dc8c90bf7e7c599d2d67cf6ebe30954cae4ea1e86","ssdeep":"","tlshash":"ae2125e4d668425d307ac2847a0ccecb628d72b7a21815eae4ca7934e34ad41392f349","first_seen":"2023-05-24T14:32:03Z","last_seen":"2026-06-13T01:24:50.286885Z","times_seen":948,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/bold/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/bold/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"14f3d-NwF2ejU9knAYHLwpS4Iszl9H1Q4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\nage: 1332647\r\nx-served-by: cache-fra-etou8220171-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12152\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85821,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"debe807490c196adde15ebeb37781fba","sha1":"3701767a353d9270181cbc294b822cce5f47d50e","sha256":"c8a32df67f8bd57f70c6371e15ec232df25ddeba3eb9060d7aaa68101a6ce240","sha512":"0e10ab3c302ef9f99ebff03943a574f02a99def68211bc0f4fb0e5219d9e8b98d0633c4e83751e46f7bf2e9cdd50cabfd3718edc432f0460efd2e72c9366fb51","ssdeep":"1536:XeaKqhzERv84EqLCDmu3Oug/mH89BUkr6WfzA3LVUr5T5FX2aIoNlY:XeaKqhzERv84EqLCDmu3Oug/mH89BUkW","tlshash":"dc83bae4f5bf28921301d1d0330b1a61bb0d9324a946ec79c9e37ead61c2999c58e7df","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-06-13T01:24:50.367442Z","times_seen":1646,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":102,"dns":5,"connect":13,"send":0,"wait":21,"receive":6,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/gif/togel-online.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/gif/togel-online.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 521554\r\nlast-modified: Fri, 17 Apr 2026 08:29:19 GMT\r\netag: \"69e1ef5f-7f552\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NU78a12YL1FmSlXRe3Wn%2B7WrsEunW9CGxAXX%2BdlqInKVWsEzntMFu21D3SdXaDLeXG9UiHYAdoag8KNFCy1zdnoYJRTyhvr5WhQOb0%2F6lcqbIGmQyXNEDxAd7lM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f406598a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfbbe9b1865347d8634626b7f92feb5a","sha1":"def1c30e870d2c887a31f7bd7749b5931d21783d","sha256":"dfa96922352f965eb6fd7a1bd8bfb5b9ef406d2eb41623bd2d27a4192b5853ce","sha512":"ede253f3ef4ac52bef7f909e1df74eb64800e474d5ec53346d8bdc735e721e251b31cbf1d74c9d747e439e3f60c1484085f43adb6e2f4927ecc94de9c71b3b12","ssdeep":"12288:Bieb81cKoH1VfTRSUjPJ+dyPj+cRrP0+MNe6bh:Bieb0cpVVlSUDYdUj+cR70JNe6F","tlshash":"33b402405ff318d2f24e62ebc4d42c79ae679a93cdc68145b8cf98a60f05236594b3b7","first_seen":"2026-04-28T17:58:37.458231Z","last_seen":"2026-04-28T18:23:04.492434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1024,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/wlb2c/icons/numbers/dt/tiger.png","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:09.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/wlb2c/icons/numbers/dt/tiger.png HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=rKYW3DzZkWjhv3ELD1pghCu4VWMsOiztC5AjHDainRk-1777399087.958838-1.0.1.1-7wwntdJwUJFy1kxGkSW6gdk1KM_Pfl8.wYzdJGWOX7yPiyMvKSCY2COw915TgL9rzYnDIGqncTDCdGFoPJat1pAK4jC3rcYvkLxOPoyiv5veZh86j6A8JIi3OQBc1MeV; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo; laravel_session=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%3D; cf_clearance=vynNjHivtu2.Ztp1y9jln_2fmwCEh1MUm8.zuZ6KP.Q-1777399087-1.2.1.1-d5pwSYDwjKtqN9JbVaRv2zZHzxTvUIX6IC09qaivM8Pn5zHs7J02JdDWVh1sdBpvmdTdzsQdmaGAGI2FeFH.tPhxq52qLm_eJyp.bVITlCUHP8fU8NKKuTFcgKF4iWz6q2IxUpNCn78vRB0IaKKODPO2QQMGuaRxdACBbAG42OGWj67mLiUPvQyXiymwSBkNWc6RJbXzI5Ao5X45eBxorYQAWrvDIpwNhzEBUOuiteHA1CmuG2Ozu4eiZHTJxe45AREaHT5N3I.pX4p_hjF0jpYPCbcVogbizn47UtTYJNmZcaLkJANZ3EOkJafonMzydt0XTdMhI6.BgvsNvtJTmg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 23126\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Thu, 09 May 2024 06:29:47 GMT\r\netag: \"663c6d5b-5a56\"\r\nexpires: Thu, 28 May 2026 17:58:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f4155eee712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"dd226c9877ff17e2023381bd9b2cb26d","sha1":"00200a8d2125468558e2966ec40e35dd19968c6f","sha256":"76bdd8f9035bc0ace7e1e8ba7c7ea9c70bc9ed01e5f6034efb9737301d4ef15c","sha512":"dc059af8919cb122312f878e9903b33fba125d790f4f87d618639e9c0fb3be110b222e2ff34431ebbbb319603163624a303640bc37350dbcec223e45f797c4fb","ssdeep":"384:7RJqO/QvzzplHvRecmRWOdQM9GRszQOOYBcvQX32nY2d12nXoW5qcbjK7CbDMlI1:9JfQDHvwMZMeOjKQX3cYm1oYW53KsMi1","tlshash":"dba2d0d96b9705c998e92d4a2963bb9ccae76350ec451288c43bef90b5f38d50431cf2","first_seen":"2024-08-19T16:17:39.242726Z","last_seen":"2026-06-12T23:36:47.761475Z","times_seen":721,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/font-awesome.min.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/font-awesome.min.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 May 2024 06:25:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c40-7918\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa2b93712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-13T03:37:44.76541Z","times_seen":285462,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/vbulletin_md5.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /js/vbulletin_md5.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-1639\"\r\nexpires: Thu, 28 May 2026 17:58:07 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9f37f406ab7c712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2780)","md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-06-13T01:24:50.317211Z","times_seen":2214,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/liScroller/jquery.li-scroller.1.0.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/liScroller/jquery.li-scroller.1.0.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 436\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-3ea\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbade2712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1002,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (565)","md5":"097d12ca6affd5151d1d56db876cc1e0","sha1":"4f1b6d162e327a5e8d0f37897d4d559dbc265ba7","sha256":"e00749ed99da6de8ee85c1fa969a7571feaba5a506c1dd88be8a12e20ed680d9","sha512":"fd4f03f1ba6fddb3bba25d32d09e9713d08b55fbd11330d43e74dd874646d01a27eb6dc19a49889cea10a09300adfaf1ee0a11921d6858255f31893fa8d8fdb2","ssdeep":"","tlshash":"05119e08eb0611bf0ce5e738fe3f9b1c75f315134222d5a495fae4541d814bb5270959","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-13T01:24:50.300062Z","times_seen":2158,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbcfb256a5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-13T03:19:04.216518Z","times_seen":78121,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"landingsplash.xyz/banner/image/promotion/IDNTOTTOHK.jpg","fqdn":"landingsplash.xyz","domain":"landingsplash.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landingsplash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 10:48:32 GMT","end":"Thu, 02 Jul 2026 11:47:14 GMT"},"fingerprint":{"sha1":"CB:82:FC:AF:C6:58:D4:6F:13:F4:6C:7E:E7:06:2E:8C:DB:45:A4:8B","sha256":"DA:CC:54:07:F0:B8:3F:12:7D:34:75:25:ED:B7:E7:AA:EC:99:B2:10:E7:9B:78:3A:9A:E5:25:81:FB:E6:02:78"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTTOHK.jpg HTTP/1.1\r\nHost: landingsplash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/html\r\nlocation: https://object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTTOHK.jpg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oGWmlbTnYkmkYbznGRb%2F45E%2FdpDpaHzaMifMqI3xz0oMf%2FHLB47Xw6lHQdWEtq%2BL0GJyuHTV6DjzrAUyxahZ5ESKa%2FSGdYgTf%2BabMt7%2BEI6KbdjyR6ZmjVXRedfJklZbSTmPFQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9f37f3fb19914e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88744,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T03:48:59.088436Z","times_seen":16375574,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/loader.gif","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/loader.gif HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/assets/css/cu/cu2.css?v=1777399084\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5517\r\nlast-modified: Thu, 09 May 2024 06:29:47 GMT\r\netag: \"663c6d5b-158d\"\r\nexpires: Thu, 28 May 2026 17:58:07 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f4065b0d712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 15 x 15","md5":"bc1bcccc4a3342d2063088deae7d17a3","sha1":"a1a988f912d3e17a908945750b91b508672ccac1","sha256":"a76090f2d604a7e9bd429900001b367ae94f52d749fd0f94706be887d87cce7f","sha512":"08c93c3506f083bfbe9ba6d7f9824f871ca145ed9bc431c248d3352a05cf23db90ae2f39bdefa532e8d16f29b623d3d91664753ee471fb606a2b082b6cf791c3","ssdeep":"48:0zXKn2kC7TYJJ3C+gXfU8wzXKn2kCdf4JJ3CUgPfU8GzXKn2kPJJ3CQgrfU84Wy6:K62K4fC62rSYfU62q0fI62oGfw620ifL","tlshash":"cfb1980de9d0bc05458de9c92de7d43a1b1108508ee8eeaaaccec8568a18077cd2d7df","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.408735Z","times_seen":2349,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/owl-carousel/css/owl.carousel.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/css/owl.carousel.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-4b7\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fa4bc3712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"78047d6c2d6e61624be8ab53f040f58d","sha1":"b6cc8fb9d948477f947bd582d7eabcf5c69325ae","sha256":"f082a14b9512e8b85752e92e860b06c54b07476aa9f84ab4d22a6238809b5464","sha512":"ffd64443e18ebf40496ee41d44a233181b9cca1a85ab159fdddbbd16bc32ef883e00d59ab66c56fbe8ed905ca76c8506f3950ad1116f216b00f5c048d13eeacf","ssdeep":"","tlshash":"51216ef40131318d602bc31f56ceaa195a3dd1129d22160e521faa094bcfd1e613f78f","first_seen":"2023-05-24T14:32:03Z","last_seen":"2026-06-13T01:24:50.38576Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/css/bank.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /css/bank.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Dec 2022 09:00:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a962a9-1a75\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa5bdb712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6773,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"927f14cdc2e033eb7d04d6a9af03f6e5","sha1":"95a1493c0183e6ee5eaa0af8e2cd589f71cfc4da","sha256":"eddd23324bf76ed8e866721eebb71ea1ccf9a217f967dcdb5a8d03196747fa22","sha512":"81362fcf4a7c1fc82703f075a6b7b71b06deb7a29a1fd1532c4257490bc52744578826ebb3434807c5b0a95aa6a997c1a30f411cec75613f11d88515806ca68e","ssdeep":"96:gDD6ziSw7CHww/3iP9PEZZPR7qXBLVn/RydJL9EI7CzuAW/Kv:gv66CQK3oKZKBI2","tlshash":"e3e16a26d6d23484ac0bb52014b69fe412395013ef1e5e2d72ceb7bd6f860f5b1a39d1","first_seen":"2025-05-13T11:43:45.096809Z","last_seen":"2026-06-13T01:24:50.432057Z","times_seen":832,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/text-rotator/jquery.simple-text-rotator.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/text-rotator/jquery.simple-text-rotator.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 783\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-df0\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fb9dd3712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3568,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (377)","md5":"9964685a5509aabd8ab04dc6257d97f5","sha1":"927c58db28fb33c328a5a0bab4f9e3a93555f651","sha256":"95df7f4d192968c5c68e43a936016ad025fac7ce02a221a1bf13be6592667c30","sha512":"f58116f313f5d862f6f561383d60e0cef0056bb77013b9060b60e3a2a225fb2d55cb5691da77b5cd76ca10f71929f1697b267bde4ee489352efa3475f58ed279","ssdeep":"","tlshash":"d171e34a68fb48bdce3a91eb83ee1f56247909b28c006441139b5b7e08f19456bdde63","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-13T01:24:50.414066Z","times_seen":2161,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/json/fetch/index/data","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:09.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /json/fetch/index/data HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://toto911mania.cyou/\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=rKYW3DzZkWjhv3ELD1pghCu4VWMsOiztC5AjHDainRk-1777399087.958838-1.0.1.1-7wwntdJwUJFy1kxGkSW6gdk1KM_Pfl8.wYzdJGWOX7yPiyMvKSCY2COw915TgL9rzYnDIGqncTDCdGFoPJat1pAK4jC3rcYvkLxOPoyiv5veZh86j6A8JIi3OQBc1MeV; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo; laravel_session=eyJpdiI6ImUwcWdTbERWZ2pvcnp4VWZTSmM0THc9PSIsInZhbHVlIjoiTERrVTNMMms1ek9pUzFaVzhnVE02Wlg1MkpIVGF1QXdaVFZEenFUNmliVk5LWDN0SmNFSEVsbTZtSk9QWkJCNGdnTDF0TFc5UkxiaDdqT25QeTgxMTJKOEN2dnZqUDhFSnY0dmdXMHFvUmw1MEJVbXJIQTJTTWc3QmNRZ1d3dFZMRU5leDZFQUI5bEE3Rk42T1hxbDZhbDN5V2hBVEoxaTNrc21lSnVGQ3hGQWRPVVVISXVKRTBvQ3BXQjJZWHN6NWlBZTZpcWVEMEpOZDFGbWYyL1lwd0RKZnVqZDhrNWlNZmFwQU81M0lTajkrSHBLcVJENGlIUm5FQmZmVGdYN2dVc2QvU2hCTFo0QmJVbENQVk45amh6UHkvemVua2J2UkN6b0V0dy93OEZsSkphQmR6eWp1MWkwd0w0aTVReEFza3AyeEFnVVlCMWgxR1E1KzNIdG9XRW9YWHpFTHM3MDYrcDY2aHoydlNaK1JUdVVOdkRNYklEU25LdGJKNkZnVmdDSENnZ2RJc2hnVXIzaHo3UFFZUWx4WUFnSU1HUkJTWmVJbHVOOWd0TkhEd3lMUENuSGJ0TWplaVJpd3ZIazM1akRMcldjVi8xWkIyTVczN3JEYXl5UnVjMzlOUHQxTkoxWnlReUpRSWQxN24wV1Juekh1cUhFTzBiYUxUbi8iLCJtYWMiOiI3OTk3YTA1OWRiYTAwZDdjNGE4YzZhMGY2OWQxMjEzOTIwNmJhNjY1MmRjYjg5YTljYzUzYjkxZDM5ZTYwNTJjIiwidGFnIjoiIn0%3D; cf_clearance=vynNjHivtu2.Ztp1y9jln_2fmwCEh1MUm8.zuZ6KP.Q-1777399087-1.2.1.1-d5pwSYDwjKtqN9JbVaRv2zZHzxTvUIX6IC09qaivM8Pn5zHs7J02JdDWVh1sdBpvmdTdzsQdmaGAGI2FeFH.tPhxq52qLm_eJyp.bVITlCUHP8fU8NKKuTFcgKF4iWz6q2IxUpNCn78vRB0IaKKODPO2QQMGuaRxdACBbAG42OGWj67mLiUPvQyXiymwSBkNWc6RJbXzI5Ao5X45eBxorYQAWrvDIpwNhzEBUOuiteHA1CmuG2Ozu4eiZHTJxe45AREaHT5N3I.pX4p_hjF0jpYPCbcVogbizn47UtTYJNmZcaLkJANZ3EOkJafonMzydt0XTdMhI6.BgvsNvtJTmg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:09 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: public, s-maxage=900\r\nx-cacheable: 1\r\ncontent-encoding: gzip\r\nage: 0\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9f37f4136c54712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23883,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"37bee5eea78fa0b15cd48360e45313bd","sha1":"2d62e31907697efb714bfd60274708fa98db7877","sha256":"0545ff630d67f4cea622b6505a5941c88d0cd474f9d6a32f7b1fcf4415c03013","sha512":"deb9ebbbd7d441b7fc721ef3e579efe19eb78f124231b53f6f5f48d4d7729ad9388997fdf22283916fc5b0d09d34b4682dc90a0612c9988dbf49f7b1c2d5677e","ssdeep":"384:3tgETtDB6q+U9i9gB9YwX3v+Mahd+vdxm9qVvKc/FoPMfah8iuL4X4mPxf83qVvl:3tgETtDB6q+U9i9gB9YwX3v+Mahd+vdW","tlshash":"0db251b96d94657ae50b0eda326a13cf7ab0b821dd4f842462eedb0d8734c107fbd419","first_seen":"2026-04-28T17:58:37.46777Z","last_seen":"2026-04-28T17:58:37.46777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/style.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\ncontent-length: 582\r\nlast-modified: Thu, 09 May 2024 06:25:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c40-565\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa6bf8712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1381,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7948ca78fd59f3251d841d7ca5799933","sha1":"cf65ff1a6be935c9e9cbc1a3cf8253a633547318","sha256":"75010842dfd01763618136d66e0aba9164b30ec4dfad61242520c07e1df8a5e1","sha512":"008effaffbf9e2e764f573921f4dccca7b4ea88dafaccf1199a088a6843fc11749cac2737b42dc93885e0a70dc00b9f933e53eb46a4a4b2100ff5b5a2701562e","ssdeep":"","tlshash":"63214491f7c33667704a801c9ea1b5bc1f1b2287975acf3af20033fc8b846801c76999","first_seen":"2023-10-29T13:33:29Z","last_seen":"2026-06-13T01:24:50.428616Z","times_seen":827,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/mandiri.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/mandiri.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1127\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-467\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fb0cf7712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit colormap, non-interlaced","md5":"d6370af97aa7f285493a9aecb3e33a42","sha1":"9a52cc25ace828f731b8790593a2aef19a7b2d23","sha256":"5e829a18cd9f27940b0bcfd8cbdc4395f368de18d89fd96bf09fcd5cf267a58a","sha512":"6414efee3383e0689225b4f5a2225d2bf5f9c50e04d78ea286cea5710d549f8f7cc363eb533d0b61cfe5e4d48c58b8e21660d7ce0df49fa552a3f3233460269a","ssdeep":"","tlshash":"54219687b6e67cf895399912396a304a8f990511ac34d305078e670347f58d2bca73b6","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.34703Z","times_seen":1870,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/event-slot-online-mahjong-ways-toto911.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/event-slot-online-mahjong-ways-toto911.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 488764\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Apr 2026 08:28:30 GMT\r\netag: \"69e1ef2e-7753c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bf%2F5y2B0eMtIBSIOMn5aDV3G5jiIkVZrWb8VJ%2BczLq%2F2zTnwA4pZYAIYc3qHIHB1wv%2B19EYLwBx3oZ3hKIcJZljmLesSyeMCpcqPHVf4oiz0UEpkHT9oypRYNB8%3D\"}]}\r\ncf-ray: 9f37f3fabd2c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48746458717f61d10bb314d1f95a2864","sha1":"cb766bd319c4842b2720549b2eda7835aff2b436","sha256":"c786fda643816a2902b57c4ddc780475ef448f76887bbcdc1ae938731b470696","sha512":"fbbd9063d81904e8b7027be30005157a7161520c51e9f55fc197f0b977b6d09767f2f6fc2f509486cfc143d3b8028f4abb04a87e7e1fa16b188a19c4f5b5ff54","ssdeep":"12288:pJsGmF6uAeU5atngeJ4WUpgc+EsYCk5XcI:ba6leUKg3nsHktcI","tlshash":"49a4235cdb2367c9dd84ef3ea922bef451a02844f2aa85defd548773009854840afe9d","first_seen":"2026-04-28T17:58:37.469955Z","last_seen":"2026-04-28T18:23:04.489327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1375,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":159,"receive":1195,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/parallax/jquery.parallax-1.1.3.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/parallax/jquery.parallax-1.1.3.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-3ad\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\ncf-ray: 9f37f3fbaddf712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (420)","md5":"1508097fb2657eab7e68bd385cfbdbb1","sha1":"c65b4cb7750055e01101a4edb2f7d2d749e85174","sha256":"ba75543913b3258b7a19cdea608c7cc47322898d244b40b6190c970be2d3a2fd","sha512":"fb2b63f3aa3e83603dd8ac3211bd4624c00a0f534935dda13ad959121608d3bd7e3d5fa284c470692a9c57129ee665cc4a39bc4697d09c45841f506d9f5a7db1","ssdeep":"","tlshash":"0f115b38bb107255c96a762f0b3be309b21736415c028124d229e5dc6ea9a5bf86ac68","first_seen":"2023-03-08T09:00:45Z","last_seen":"2026-06-13T01:24:50.422119Z","times_seen":2198,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-sydney.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-sydney.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4533\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-11b5\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3faecad712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4533,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 210x205, components 3","md5":"4ae2801024b806bf9c792b648c2069ff","sha1":"5327fd9187084a3cd5665b061be1ad50a88fd6b5","sha256":"e7f471995cff2d274f80d9c96d3d4a066d8731fcea2d52446a93d88bd5e0d878","sha512":"f89eb640e5aaec141e870f04b441462557bd49d6e8d7cd72c607552b1983d9b8ca5eaccb403cf7e4037c7465fe2be0c02ada45b49873d6554b5c6fb488af0d9f","ssdeep":"96:lP+laji/gq5UJGWqiRQux3DlXOb4vCK12ccGMkFs5AaoS:xrircPqdmS4vTkrAaoS","tlshash":"73915c21c3595704d89d43346ca51a6c920c6daf09d9b165375c6ede0c3bbf0ee4f618","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.34641Z","times_seen":1784,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/bca.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/bca.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1086\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-43e\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3faecb4712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 24, 8-bit colormap, non-interlaced","md5":"6acd78d945803ba574275cb83b5e4981","sha1":"e2705a9ac3be32cc594bf8ebe29da30c46cb2013","sha256":"b60a19eb59f86325af0f4c3e4736e6ed7f3ecc1cadd6efe316e90ae7a75f0ce7","sha512":"1432ba4bbaaaea7bfefee8954f73f99d758fb0f02062cfd56d2cdd1b1ab21bd2bfe10604ff8bef8a63efc76f3e90fa17e9e65726178a50544701d7b0739f5423","ssdeep":"","tlshash":"1411b9b4fd87c09fe6701d35d5f79a28c8111c3ce9624997cd7482a7b897c808309195","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.413429Z","times_seen":1877,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/json/quick_menus","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /json/quick_menus HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://toto911mania.cyou/\r\nX-CSRF-TOKEN: EMES3zwuNUxmegLitgd8fOAAR44hL7XQC70oGx1p\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: application/json\r\ncontent-length: 104\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: laravel_session=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%3D; path=/; httponly\r\ncontent-encoding: gzip\r\nage: 0\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9f37f407bd3e712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"adcb96f89274905bdbaf764afa34e985","sha1":"b2218da3ef3ea47f6de1c35acab44ef3828d19f6","sha256":"bc6c2547e7ee8f45890b5457970ea985c02f658d50168f10260ede061e307ebb","sha512":"61224789ef15ffd100e6aa4ed000f834878ca76a101a8fc24d06f94e4e8a8a678a14e99debe5217cc66e5251270548d7921acba272bbc99e25a72af727533dee","ssdeep":"","tlshash":"e9b012061a537c381744ebc2b10cdef016d41210c311212144dce88e8794c96e19755a","first_seen":"2026-04-28T17:58:37.473512Z","last_seen":"2026-04-28T18:23:04.465304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/cdn-cgi/challenge-platform/h/g/jsd/oneshot/a80f1640690f/0.009472718138661906:1777396079:D6HQFwd59xOjDpk0Lw3H94_qBP4pmjMAwope5ZygBfQ/9f37f3f3aa80712e","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/a80f1640690f/0.009472718138661906:1777396079:D6HQFwd59xOjDpk0Lw3H94_qBP4pmjMAwope5ZygBfQ/9f37f3f3aa80712e HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12152\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=K096Ig422.qBXdlwlbcace_KSvNhXsJmrcfM05Swq4w-1777399087.6701095-1.0.1.1-NKZPe2bqSL1..uMBBn3qeBSiARtNeoVBekwWXkFrNPui0Av2ZY2lxUdkBYCr4AuCfslpqaYTDWuUaGC5eui4zGFIdBGCddpIqB2Zeh3OLTV39fFBErn5x8AdDBZAAMIJ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo; laravel_session=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%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12152,"data":"vgGTc3rEA98MWRfAEZU9UyUcURPURjUMUb6dU$jA9roU-+dT1+G8Mr1dm9TrjdM7U+9bT8yU0hjrxU0cRgt4Unegu4UA4K$u6URhW7eTQ9jr83rovF77TQ0sugBHyq3UA-dW8rAcFdZ3-D8jU8-veUhdTTQLiHxYzdYOV$Grv0cnjeyxf5mxd5m5UR-YimcOWeTU-63eaDD5$b+cO-vjUqX7UcjrnAXMU4ZJFr2rIoNB3UwnXL7ZVUcjUqaGU8IQdiwmLFsfUyLw-u27nUTUY6b9jfKUUm-k7QKr-0$UCQTLKdeeL5ajUnaGj8ju64-8NxxjW67U6ng0ZNHKTU8ANRfW-r0G60Gq0GUEP0UD7gXGUdZPGnIk933GUuN3WH3a2diL56LhGxxWEZtbhdsXE-8dK07EZJ1TUdjD0dU$$uY-im$U$NZPfZZqaE686aZB$aRE+qsXRJWrE6tx3Uy63lUGZ0oG-rULd5Lq+AIkQdF-ZVYOU0RxLyOqDAL0IFgC-9LLMxlU903r$6lqM4MNNkUUY4JqRqELWEJ7h8xaxd-8-Eo0jUIavgoyLMF2IAIlBV6L$z193CgMhOym0j-KINqOrtXGcQ08xmro-PPlKzCgCLgu-puhGqC96PDA76c33ELw5D5TvqBrwZABa0PME-4GbdNQhD$seb7DoMHKCeZWhxiOCAmD5YdP091OxiG8$nqVBaTsgJBzIAeUqwj1gTuuZ2TTHobLrfeB2RP2pUMnXfxujRRb5NBGL554pG3c28MitjdR$KAuUUolk7xGMjdT5d$0kE$7kB7R611D1$frqRgQPs9sf176stP3-fNxIAfufgTWdx6RGNKTv02xWY$CYmcTxUWwfhaB6f$PqDddP09jVUWd$1ZPDg1KEDdmrdrE7K09GfUc6GjxAyltBZvjfUWwG0cDU3klTY9MnlRG9-kwfgKTQ5DX3rGTcIsLyaGtepA367HKTd7f0xUAkXrw7Drl6foZk-0a-0cYA7AJT0+A8jQZ36hC-rmh73pJ0EXryvZKgGvM+aqvtU4EZkKl8$srGL$km3q-YqjLvWXp$0ePrHNTZpZE7mkJhV--nkgF7ufvrE67UGE4Ni+967Wqy4OGG5yeN$ecWj5pn$sh8$Uxx$$-TY5u3j73$Pgr$4UZyjg-EaWE9G5x6v7Bf0k$+80198jikeEj54dR$W6FrGc8zQTnvljA$60OaNv8-j-rdRU06Wa+2T0c2xqEc2YAUIUYKlBGfL55LK8ZVAEMi8lDa30$+kADc7P9s1-PwCT2PdO8AkzDgf8nsxGrL6OmaoydA7WRUijh8gfrddEl-a673c6nfile9E-FuvAMq7lpVbBYfrvjth5mPIUlHCaQR7W9GWPT9Eu0DJTA20Udtz96fk6zwfycVK$uETy-CFR6fj9RYAXktXUVDiA$t8B5$+rAyCTtgY6rTRY9r3zHCbpNgJdWvXjg$+oTjDWYfixzUzvE6636+1htyo1OZW11h6zR6UuvUkvmBz79HhvpZUhGmvHnOCi1gdCg72TDB3JVDBfBz7sVyimWjUUvV1Tw9XTUZTvzufAr6Tj8LljGU+ixWVf5kC674rsED8u5$-TlUaM88UcjqUTPy8EgTryDg4fpO1ABhfdM-tq-g3L5NTUvKg6GY32TiT6Ywv$GItUBYlYf9j5j-8v12XuNREj$TiuMCM7CpyQNwQ56m7gf$yGX8u-jybRK2vkn2AGRGyrUGxY3Q-ufG6O9pXD0McgJT-0bPIZsUHc7-3tGJLdRgldy0zYt66N+ZjY8-oiDLGdiXAnaUtUuUMU7cTm4grPQA6ntUfLkyn9b4nWG6Yh$wtzpnr$ixXRfvlhnGrALecGR03PH$IQFxBAk4IIpf$eD3G0377PLPTRD11R2W$MPgRyL6RTO0uArvPraQyW$TPkGZqUcTj93Jiq3JdT7kGbGe-5l$r$VaaU-R2Mjf$rLb6hhh3emUnj1ANQa1hsXW-Xu-aBU$HGZpLR1GXaj4gsX5L1yx8+-7DX$AGxJ93RTuni3o-dcWvw-0ulURLKU6Q370P0X-7uND60dABkPFesZAbEgtLX1UbGitWZGYUkAwI170Ljk2900c7K$E5r$o2pce7b0j+vX4MIFwfKdDMd$vKdQp9TkhnehGwalGYmK3$6T2$U6XIs-QF--4LY6M96lwlW$-N3PEWhe8ET2ry51WtnY5y4U7DPu23kjc05C32ZU3adumWzt4J-dHKwrdQs83ckD8BbENsxNytrTU5vGOtfUjXEDb1yY-$nt8cg3Ztr1LGYZN7-+ky7D04$GV-DQ8Kdgn0N8bQ6MvREYt-s-nueqU8Ig3kq73qp8Y4tr+$5hdDG-$4WBCe-jAuBFgKjhbUt8RMhBXEP32ddA2Lc62K-N3x5UXmcEh0RM8+-Tl+Wh--hHWhdYhnb3af0GYN9cjfTYir0p5fUKUQnfrbQFXJBl+Nd9XT7JAJnp9Ufu14gJ+ZXCPA77YLodKm6MnkZj-wi5hk79crRyXDcUltp0EugOymOM8waEF7TYP0AFaqCUtoonTRxc1JI7PxhgYDJA5jhTXAkqsfg7TIoimMaUREmuYvjIWDg$dGYsBZy7Xu26+2CZyDy+4LR7Y-ZUA659pLx2U8GIdzA7BUNK8MzOhvB7G3r$9YeuPfqakQKA7TH69DFb+90z8KhDrWjGX9a7GRM1ra4MNKGDUDnMCI-JD7QPsBAn1z0V9T038PRC0AO-kn8cVm6sIidmwyv-mV$d$XAxF83wgoTrYZc0yKqdGjWtORDUUTQMANMYhjPbuu3g4KD9ogcYL-59gzvfh0joEjXcy6A8UIdRN4vTjsQJvAt4lUauu3Md6yWoc20R2s2gtWqx1Bq-bjzP6i2YK3lM85+LQ3+MYrbARKGr$QAUx2pRg0zaFRqJJm+7mYTnEK+v2PtR2fjPqrBEN7AA$Vk8UhJqqgv$0FQDYDX9EmPuGmFOKKqMbOwwQyX7-G3Q3jTswIR9nKBRxIY321U98v$lKFrg8zLEeXNXI4e47UWgcu1VvjVMXlI2OaEHfolI7DiWvK8ca0d9TyYbWjK9gk3kbWK6vIQICLbpxYsPgR609tN-TqydHst0X-ifYZjlix6PIjFvzMurZ9M4JctlL5CxavgjPUlO-KWkVhywkbI7t4$lLU6Rw3AXNZkq497C3cELGgRZu7yLD$k0N4baCn9QdLp1WaYnNFfEe0V$vUmhzNdiK5j6mL85j22LCLUNne-DBfJ7dWIHq3A-XUQcAP-D3-wDyOgj-kY0f9yfHr-a05WXsR4VD7CNI6s0ioeYNH18s0N7j0$Ui+l5C80RowpBxFlzokAfaMRJlEz6moa+hUFcuYjdBIt0JYylOnqo3BYjLfiOjRbtOwvls3d0gx4TqNP8U5i2ujjktjr3PYyyXGmbobG3rrJcs4ogk4N6o+ZccghejPc4z2X4qrCjpnT+$20UMaKoZjC1AeN6FUMZzuM8y+q1W2Nx-w6J+BEwW7PB-GJxZw+4lAG+XU0U$TZ4rKc2GJL4O8-fLjzrzUg4gf0QL6v4ET$JUQIZxwOfx$020uk$aUxaLksnpUwXLwajT4p8zADoh$zZRcTn$Y8ejTtUMAEoP22eMu7TX2XuM608713GtoyKtecrd8qXKAiU$3KgWj-BBuG768WUEkrZEQx2X4g4fdAdXj$YNB5Qjd6J66xwaBBRNUJnaAeahJBRHabu4e2f0+G3pBXc3$jek6rZq+KoeT-2EaFxKgjP8nEU2$yJmo0XCefox7OuBZLGGeX7H1RnMXGxZo+jPe-naeyBsdm4PoGYU7qYlQckdU6Yj36wYnkPKdnePBhdHJ+QF29a280kEUdUxRJ6nRwwd4N3sQsdp2idTrM6XP6c$wZ10P-d3oqQs$JPzr5wk$Wcs1zA1JxYVjBeyjt+EAzepeKuHoocM1c$t6$2a8agqw+BLK$x9AkJ0k4wPekG6x57CQx2O86U9ofQ44582fpo9$17yB1RNAYf$LfJr7-+WnqUDew$nXuor4$xIjxfy4c8RrknU2GQxe4KreMLV6E6$3pfyw+7Yr33VQzgRUUl+JhKlAsRrar$xfPB+eMjbr9U6rgjHfPBBuEah$0+QRBuD6jxQRY6Le1jAbc4Y6JkZATQEaTdXXWe-ZAl3LdU08b+zQWe$xYdZrZPU7EnO4AUEnEcEXNfZlvaeYuUU33krwqJAx2kEr98zrN69nU7A1J3BKdQp3L7ZJ$wJeE8Jo9ZxwZu$bELknZ3rAURjPrgWGoTe$dU$oR88aArMcbAc4rLlrOQYe08twU3Oj0j-BYGEnDr0rBfzRxayF0bafKLxdUu2l6b$fOrEr5rebmfWu3dAlJ1-XlfUPKZQ4zUb4U3KeM+UjrLT8eXurCkNb17yRaG+Blb3$abyaKgu2EU2gM2O876jx1wKlJGkr0oCeZZpFn77lGlYAHAeKKaCL$1WfBYuJkYJchJgepB2bNg54AGzGVAx4723rNb3FU0fRjTxYTdGxNfRAfF0GUTd8HBk7-8GQ5QgfU-2Q4gTRUm0PM81TMavdUqDoDo0-KZOds+bG-LTo-FJXhb$gcbFTljR8buZ2QZqr9aFxwwE6FQ-YqkCaaK1F$qho$0oRoGw4Cky7MeoYOrXq5AWARURL1G9b+jTgaK9kTL3RBjzaxBpa3KOdum+8-+3QOZZdR+-+aLd7TrZx0AWXt-UdB7M8DeX-UoLG+Y5r+lfbLcQBtBf+aGmohXc+ImGYOR2LwcjT4kAJQR-f8a2La60Y1GnlyfTwGTI$WAya4e-ZGgOrD8cAFr-gtwd2t2Dgr8ZdOFjgsKR-DKU1kwp1MBckmuN-tJqcsaVei0Qcer54grkBjcu-jT8o$lu6FUQdiY$TmXeZk7qY4Gywi04uIbP1exdxirEA9wuA7Q27XXxw8-p2Zxc82XgwkZ8YkGYA0A70TBcbr1B+PAaky1Ijkl3o2wUlFBg84qLaJ1dbCXVUY8Kcn$dApY4ux44rh89UEmnav0duP$NJkUW-TFNUCeuLK-1cZ-cdUqYnNbUJ20EFW05j7ZKrGbIm-jxoyj4m5hkd1aO4M5w+o6Lul2OQcZA8OJr-zlb0$TwjxdxTQBRUjIZuaAs4kqenvfXlPapQLG6xYAu29q$nP+LcdI3m9bsKvqdw7jzG8uPKT5r$e8s$Z8kaDwN1yedUbBfksqsB1qKYyIsdebB50cVrxnOexFAFmm-XZ7g7wkMmdqZ7K0JdqoKBQf6UR8cF0h8QxBUQZw5r3Aa8+rz0YA0ZJmHmFTF4D1FxlL-XaXRbT0yfY82d90hR7XM8aY1cQFoGywxUT4T4d8AQLLoePLxYqAaYyey1v+zra0W69$i+blc0qJyug29F5YORxJOcpjrwedYU41U4m7qQG5XofIZFgbjm44vwKUk-5AMJQABBKbZXg0FLz7ZGx+TbyItCzU2-P2pkX2VoBrXuyCN6L-9Kdkrd0cca6l-e-o1XAg4brokm-rD$wBRZa4iCk8t3s3EbjLTu7xjd5rKuhXz$RrCjkYuf8onRRRtFUdW+RhHAYYtF-1GbdqAbNJjPyL1wk7DCqoZ4vJhgduo-PLUuhh7kcAO+V0b05vE$6TnIlmKB$Fur0nras-ZT4kJcVre$vkmuVUcn4KzBaXbYm1hYNjOgOQfl0+tCZRF8fuZyRj5r6Qv-vw+L5Uj5AuLKA1wX7b4ajgU-2o$lTFakprpAV86fwj-gvCg+fn$kuUry6eIBU-$T0b$TywB7H06A$uzKNcQdTJd3kcK3wvQ5TUPI9KpBX9Z82kM+V6IQkUbAj4QwsRyvDA7xA1qCULs6akNLzQOr8LT9g5w506Yce55IPL5IdI9C9Cc6LhYAR8RA6fq-EePl3vjc0QLqx-HfzBpuD74gp2p2eF-bTeA-$o2jaXxwGoGoRnLwB2UID1QQebmFLKxvRUFUR-BLEgeK9rjl9qYc0xo0UmL$1k0Umax8tRaI7jwjqRjGU7qYeIXyYlYUAfRB17pb4YMj-gphmuudE$RYIrL+vb5R0r9RUx47dc6UZX8Xrq4aift9KFsLYhqfoxEaDyI4s8UgUqAYMPb5raErRdA5U1vhknVg5md0nqIRfXranKKZuyA3cR30PfWjJR2JgvZvmyuUC9avxFfCAUKhqri-j0EIdCAI1a1Kjmt-m2p5O50j7txwOdd79qGoK3UzhwF8j908cInkRLIFFL9m-qENhC$fWM9-yu0yFCiq11n+K+vy17ZGvBOZRAx4y7LI5wxewzbGBt3Cdwuq-5UoI-q2pAxJu1+6c63UxDn-9$4$1uhLhD4gWXOfFu$QBlM5YB5QcZz8zAMd39-UWKyFwoRF2hk6LyN8rqqetqO5KFLYYCZDLIMIFFCFNAlwLZubEJD7NQ89N1n2JyAq$ehb0T6BQnvlKbZ-UDghhzEdvBCdzCLoY4xj0kzhR1mZ3UFvqAsIGYlI38Prwgy46l5UNei-ue$xN20BO$MUwgWa0yEaDAp0gfUTFhJIGxuyezzrHnPh5lLh5z6CL9M8yUOlhMD68AK8s$G3TCO2ir6hPMd2tYKvymCoBACvf9g9skgvCj3JM1pwnbZBqAcrq8V0-eM9d2eI9yoNR1O9uwEInz1K3hjpLI-XxLyIZ1ACAAnL0BBZU2n26ciZoYxJO5A5i-5Uz6LN6YZT6oi$gbR1CnmI6NCyUqLl3Yi-bev2etct6JN1FU-e72dUZ6NjcrRDWR9uFlybVQdJM739JnBEKXVFnLN3gfp8K4qlGxQY9NI9MGQzmzfpJ+YmLnavHRt+qhsvvy40Rq31322vu9cnldjsF9qwnIIbZ5geJ66wWCkNDI0mz40nU3xg6AohpDkr92s27jermlCwLaB-6wTM+9xmt34v-AqUNE5l06BLDZQlzeG-xfxPiNjqdodB3Moh9s7mXbmFW1J0+n+nhueMxD0TkluAoBFpPmnaKeavU1WNl1K$Bqk7l+QUWX$t0m25VrnnY5rCA7K0Bw60U0r-6sUtV481O1ey7RVUY+k8VnRZ3mZD3mb2NFF8WDq+GoiZJKFMPQJPh-X2lRUM9qqCPAAyP$iyF43rrgCt2NedeACNCCj1yXB2iN84DG7mL9IRCpw6zrbzgVhGPFwQ-nYCtfZ80v7CZu0Nf3MEWppXlVFE0OCMTt7xqzz896hhuA3qGPyZwZZi-e45aHk8C-u8BYsfslTmqvogxTLhcpdBblrJGuK9Y1wRj36wYeE$GJJ$ZMA3JKrGGT8CkoM-NP3xyp--gNbm2Ax4OFXk6F6AuLMoXeCj6xiru85+iZoC9HYtwHHJwHrK-q6GRpQGoutO0AsQ87OaXy6yea6vUPQtnmzAO48lmNAGJumbvFNF11yM-eNbBwLZj2LaNvKDJ7K9PNx6NyaX8c8612fmUO-$5RZLOQd5piOVIWTr7I8UuNsEHgiHpclmx7kpFd63sRaVP2iL7QcdYAOcWi9tcIECdI2lAw6V$2+p-6IH1vuAvR3dL-k665s$5RXbPU2WVAY7-dRy8FqVlnxd$R-dF-TsrFxRynrUiTRO$xMY86Xmd8ddrs6UTGxfRUsTZbcIDx+EJjLCZWnsbYflv3FUAIfqc1lGb9rm-tddv6ntYh3+p9hlOUg3N9TjwmrFuJcfLAoq1eaW$Wtj-gr$8Pn-KpTAusxv0Loxxeattj86D1Xi3FrpTP9KplXXgwveEUtj0fDixUrmd1U-Zs$aM8dAH$Nwu9w8U7yMgjjquMKY$HYRldeUKltlR977ACcQfOr7W4KYfUlZB$oGsUdPtca0dorcfYjwdMT-yBTT97VZf$nhd77RrGweG9G0FT3d6U7PlvQdQ5Y3R3WKEA$Nr9Yr3daTgPGtauQ8QnAIj7W8F0d90vCf2A3PfnEZ9jGGu82364$B7$vQ4$-eRP4RvB65UwYTTFPBUuvYTGOTg8797G9FGs-wdoUhUh$9UR9D6RxfIP15UVPyQ6QJ2n3En91Q9nznarKUEhRslRQ6d79TGw8r3tMvdUBpG5a2c$1M6wRb8zGejWz6lvXQ2AIlA$bG0RUMPi0XPhnElAkYQkyGpTCjeI8WQsdorRGjTwQLabnrpGE7K08BAdnIrdjpl5GTjld9lQlPgK+mpBUf$w10ObGuGiay39BdRYnEtGPU739iPOr2txB0u9ZGKdfxD7FymgfLYhP3Ut60jEl69RfKmpZPfGrqd0G33T-dgW00dGXDKaanrKyjc29oU1Zrr5wJG+7GVl4PZx4ETIAEr6Df+bra9XDAdKGDgo9Oml7GbFRUvIYM4EWOl6FnNrxfaT5Kq09MNMF2Q-gWrD9fM7YLAder1KebElAAGngbAnUgJElG7nPPs31rdG2vRwvwUq3TjI0ngwRD8dt3slqCseRl6Dn0rLTJyy$fMDMxZdjUuf59p9G+dIKEEyfunF0c+RWjZBPfkHuAQk$oPH7dgJTvqvPYaUQrwPUTrAY0rW$uPo$zYvJ3yQp8IP6$IzbTR6gKxcRRcG9rLUPegfkPGG+7uIyCK3x+U-6GWN1-4Rh3tUOfFE4A8ORp2fXQdYM4tGbrarF7tghMsZQmAIdPlV0G7HoQckY3pTBEYWzA8RYo9jFsUm9seQf3h8O5Hl6rl0yGXv7kKXT6T6jAs3XvQGV10dGryULErGwt-pg8gTb82kry0jxNcrviYuUlR$J4jYt6DQan9nhE0dD-YX24kv3b6-99ARHr3UWUVU0jAIcKo6ExGEbEGwfA++2f0flWQncr3f3PU1UuyUcRkvyxGjm0yl8EMGQgFgrpGU$9ZZUdyGe0xdeZRZ-1ho3EOasvMG4U3YfnL9R6o6p-FZkLYXUIsJt0j6WrOngUxiPeyFUmhu8cMwXt+s6AkvL+8f$s4TvVvWY0rX7BfeNDY1gU9kR4Uf1FsXYBnjn080AGGHAP$PfbjLorB0ULlGUuA5aaUUU6aB8MTyr8T6mxs3vaWUJKNwZKDJ-TG69kUVAYJT4a2xCnAgWTbGUgLMKiApj4yHX0Ex5dCng$uUz$aRaHfcxR2NrcY7jmLXEn1rsjHpTI+kwoUXTNa$d8G85Rw$NW6TDdbgDPU+WcqnTbfYbLf8OZBn-NAErYnodxAl5tQG9Yp$3eVEtPhUdWPBDM1lTqfg$90mAA1P23TjJ0OOTrD9A1aX$2690KeTWP33bTGNpwdHCnU9jAUD990mq9FazaO0cD4PyOyM79MtPTGsd9p-1dc7Ns7GHXcu9uFza39f7WdnAQJdaPQGk3n8PtvPY9rVGVZGF00cCRuUek152X9b52blTZ4ZGsFwFRxUwKuZ2Cyf9YAjgsr+Um$-QnQ32Yi8EAYUvMJr5b3TPiUw5d$9u68AxrYKljE7rBcMAh91$vUrgAWQ6aT2z2k5p$6FAwu3KukhEsXdWARbNrgZkMtcx+U02HfR6YM7w-Jnjg0k6UV9luy4UlR1vEUOl0XnDQMTR$xGJMhw9MAFlP9$UmMeEsgRfAk0C4O9ZyEuqxlMUQrATfjDg8HfFpoGkjcvvQ6y+qk5ebj+I4gTPapGyn5EB7QHQab$j9eHIwysHm+FurRUjEby4OdQKtXIk70RMwQ6JLNXiwNEjpdLAsGO+5TWEQI4CG9rBpUXQENMm2Y1lWK5MLE2X4dbE3gNatlZvV9zGETU7isJMWjYQD+bFr8fpTvI4vT080AV6OlGiH3L0dpXxea5vIm1-zlbpZ7FWVym1-63U4$XLMsiq78QbkroGo$JW3HcpLVXkUAGGIEjAUm4KB9-0mia1XDRU6ps6M8tsUuQLjczXvWVyZkr$ur4oGWT6yRoDl8HlWYEEVyfb9zjpXzGAwwCRo6dY+X7Y+UdzxVc70TkwYBjZwDbnfqwghe4DDJr-RePQfYU1j9oyJc+B3rdRJMgrHT-Z7p+6nzBvPs3K7-3ccf$raPwzFpP36uEOfNIm8vdrDKvANAg8LKbP8Xc5YfuDWFG1jQHX+Yv7NFdf7oFBKPgeBJrsuGhTk+RfsA2k-fUUmdcCYbM-tGg7t8mnggJ3VkZbGfmEkTLXA1kEd2Um8XjL2FDtJ$ta7cnzYv3pD9VcWPncTL6Zl-zbvRAZ+2KTjRkpU7Brec24FjejrCU8bk3tGJtcrJCAumBUhecURonnl0nA6FLZeGenJQQbnNo508YkHVC+b0Exl08r247u62MkDf2Wxac572Tqc5YsrpFz0zJbIKP4ir8h95zMTU3mF5RY4$Mzq0p6eLQEh4EoARmld-ewWujr0z+LlUZT-TcX8eQ+L-jalbwytUjusqu2j0pWVyZAGGAY63EEW6ktd8i0e-hwNAlYwYdt-L4oG-URGUxGobI$g-IA56AI9meGu12T9FTq$turBEcPOl6fGQT2xZeyEbAkXJ$zrKd1f$Jf5$UZNNljl3EnCvIqDUZXnOoGlRJwGXtHBPk5gplm7cLdYboa8GDACgm3zM28em7v35dRQys0HakGCjJ3rE9LqOkJLk3H8PedPQX1HPCdm3U3dVe7PkP1Ahg$eALb75n-yjmIEwMRA$1k44uXypg2qFFuVYEZPrLwznU4x3FD0VJ6wM4lD980173T0RQWrgfT0LfokExI80oUZLBvEvmc6Ll6+OUgwiXn$UOFR1z41uOsHoGbAnuwU$EoyqFzs-arNevEjhaQ9aL2uZhX24yJ$dWrLut3ju13cFM+mhuVGpwbLJ62pPngXh2EMNKmv1mpuO-kMit$IMvqN+CBjBjp69MJ0x17LwwlpHd2bq87GLfBOGGEM-qa+qguBFsKaUpqqrYebAqdsEzeq61Z0aWjhfqzoqljbWE3HpqjAKZsc8-eWXPfItzb1uJ-mXjhZVv838pCh8Wh$RVnDq6uOw6BFhsU1zq61jY5BkNsU1bq$wfYTZF8pi$$-TJgY$g28wT2H01c9Ywwbr$u2Nmgca0Pu5NfI2GqZcY-eAlsvj5Jm0cshLRtKts2B3XYRhoANvsj7bqRutYammPpt$d-olPPvuWKfs1gCeUnY7Bk-pG2Iu9weYhRNxf7M2m9w-YeBz1G7CJF6uNYy35Efuz5qk4NhJdAaAKMd5I3TvPb6ksb6l5uwd5dLyNJdtE0h6MvC358JPtW-76AvC3Ir0KtWqGwQvgZL84eN9j$JbvjZB8fwMZ-qw1UqZLEpizWTPwH0HGWc0Pt60quXLIBCn$Lz6Ut1RhoZIsa4zZhcc1hRq3FYM1IF6uWNJ9$+p9tR-JuMNPu5eZ9t05I1uNY9Z4qFzu5LwtLeBgeHMzZXMJY-oqg14MNw0OxpLYUv4JhMB-9$INsXe1sE1a-2JmP1Y6jnichmXUiG0jIW0NN5kExW0U3ubQelfAlc$$LTJ28NNej3wpTBgngDZDnrNuaAdU-9r0UsUL6ghHLsWJN3Frf-pT+5HTdHhzJwxi-G5TtDTatorAOrOlQpuOnZCkuHNMGFvfddsCGx4vAdzN1Xz4q2TzUAXf$nUUU85RyCZc2A$ADTD7809dU7Y7UDU14oo658KRH8GGhGI3rgY7b032TL5eTHJUWA45RGrGufwZNF7UUdXjpUyqQkAGGQTtjDXrG8bnqP$tcPKuDKQRY1xl$ajRGq2dulInpj9ttMf1Njr2TpTuUJb$UU7TTxgUUnaAo4pmUv7Fh-aAIrFUBddC$gcUAl7npb$6mKxuh5Bopp-tBTEGRehgPtpngJm$URetp-tkrGQtqUPotpFMRUUTdj8wo8pCyVORxA7UfBk$uUdW6bNaCEB4d0jUX9MUkC$r7OItlCpiZGr8j7lufrDwjQGFBrCNVT$+8N-a8BUUUNvZYZdXBFUPT$YJtUJC9rFOH$JUn48J5U1c7-7nvm$Uf8NoIUld$TPyUyl9ANrW765R3LzXsW+dldyXyiGAxi20jX7w9GC173f$9eNK8qGwc6Ra5gTY5XyHy0WahKBgufvNKxuWANUxfwib+u3UTnqTEp-UDQpUUnhlU3pnyXAYpmI8FU1$-jYV0r9gKqP0UFU4DsTRahAKXjztIUnU8a87rGUuUrMnrd4Fg4B7xl6lwFQra9ok2Ygul4r8rGbl3K4dFGcwAsAO$8U+UQUhCNj8RZsUgiq5AjfO0-K68tUq5r9c-0o$54oUh9UURn4OIrZARp2Dw5j0piCpQ-xMVCHoHOViFTrxNNU7jkUD3wgUUYWN8$UU"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: GxvJvYeyejLok4lOO//2VA==$lRN8k2sCRHYlEtM4yaAwlQ==\r\ntiming-allow-origin: https://toto911mania.cyou\r\nset-cookie: cf_clearance=vynNjHivtu2.Ztp1y9jln_2fmwCEh1MUm8.zuZ6KP.Q-1777399087-1.2.1.1-d5pwSYDwjKtqN9JbVaRv2zZHzxTvUIX6IC09qaivM8Pn5zHs7J02JdDWVh1sdBpvmdTdzsQdmaGAGI2FeFH.tPhxq52qLm_eJyp.bVITlCUHP8fU8NKKuTFcgKF4iWz6q2IxUpNCn78vRB0IaKKODPO2QQMGuaRxdACBbAG42OGWj67mLiUPvQyXiymwSBkNWc6RJbXzI5Ao5X45eBxorYQAWrvDIpwNhzEBUOuiteHA1CmuG2Ozu4eiZHTJxe45AREaHT5N3I.pX4p_hjF0jpYPCbcVogbizn47UtTYJNmZcaLkJANZ3EOkJafonMzydt0XTdMhI6.BgvsNvtJTmg; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=toto911mania.cyou; Expires=Wed, 28 Apr 2027 17:58:07 GMT\n__cf_bm=rKYW3DzZkWjhv3ELD1pghCu4VWMsOiztC5AjHDainRk-1777399087.958838-1.0.1.1-7wwntdJwUJFy1kxGkSW6gdk1KM_Pfl8.wYzdJGWOX7yPiyMvKSCY2COw915TgL9rzYnDIGqncTDCdGFoPJat1pAK4jC3rcYvkLxOPoyiv5veZh86j6A8JIi3OQBc1MeV; HttpOnly; Secure; Path=/; Domain=toto911mania.cyou; Expires=Tue, 28 Apr 2026 18:28:07 GMT\r\nserver: cloudflare\r\ncf-ray: 9f37f40bba27712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T03:48:59.088436Z","times_seen":16375574,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/SlideBannerHomepage840480.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"172.67.141.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 12:49:45 GMT","end":"Sat, 27 Jun 2026 13:48:21 GMT"},"fingerprint":{"sha1":"6B:E9:EB:FF:70:EC:6E:64:8C:E6:89:D0:98:0E:27:7D:D5:20:47:3B","sha256":"A7:19:F0:D7:C1:5E:E7:58:1C:1F:6B:79:AE:49:BF:12:10:E6:AC:A0:73:B5:89:FD:56:01:A5:5C:A8:C6:43:7C"}}},"request":{"raw":"GET /banner/image/promotion/SlideBannerHomepage840480.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 95570\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 27 Oct 2025 05:38:02 GMT\r\netag: \"68ff053a-17552\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7tDdhZau0lmu6iiba22%2F3ZJn31WEyFuUhtBpgGqs32lzQpeqC5Sd6H2m6CW5LnQGsDYfExFyXfLsYFRF5Wzx60xotDGQeq9icP9WbOoAxgw5ekLacHDaE5bcMp2C3YLR5Q%3D%3D\"}]}\r\nage: 6659\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: 9f37f3fb1859b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a8bb2a190e0c6d1c074ae915eb26753","sha1":"6a213a52a08257034db6d1865642f6c104fea723","sha256":"f900ae3967910039c7a5fb9187b1ba9ce374bc20c1c9ef6021fc7773dd5ce436","sha512":"e90273eba3b54a5d1c72f8bccdb135fd6f222fa90395c2fbf8e963de9d22f5b01ca776be8c88b8b720480ee267ae479409d4ada6bd03ba2d6415f8d52ca70c2c","ssdeep":"1536:79RZLbhBERVfH8jVUYZ1nAWQy1EqHq6RumHQ6tVHAYZv2hM9lasU7lxMjdby6YgJ:79LLbURVf8foXyPFjPHAkv2h717rmzYc","tlshash":"789302208b026ac5b4f4c0f5afc69d33c60ed6dbf4ba31806a565527ca60ea91f72d25","first_seen":"2025-11-04T19:21:06.49855Z","last_seen":"2026-06-13T01:24:50.471544Z","times_seen":761,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":27,"connect":2,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/bni.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/bni.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 1242\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-4da\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3faecb9712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 24, 8-bit colormap, non-interlaced","md5":"f4d6f0960f58c75167c9add1bba9ab55","sha1":"6a1f672e0cb1261eb33ca01cddd7a4ec4342529a","sha256":"50afebd206f7b1ef8fcf1d4dff496412a08518bc068319f97465908441cd4041","sha512":"ae764a25ef0050c0385dcc6b87239553e855d534c0026c81f0aba82072c1d81a19f79ac2abc517fffe5824234e075bb975703369cdd9f717bf1d5e7c5ecf7cc7","ssdeep":"","tlshash":"5a21ea8df0f40f1236917ef772ae5cdadca866b93db42b341253d5249904ab081d3367","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.354088Z","times_seen":1876,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/custom/floating_icons.min.js?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /js/custom/floating_icons.min.js?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Mar 2025 03:11:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67db8771-494\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbbdfe712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1172,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (1172), with no line terminators","md5":"a1f9706eeee7690ce0fb65264290a61d","sha1":"f47499adeca0a42d73894a8424a5dc65e1c8cde4","sha256":"afbf313c9cd8546932da922fcd36f00f9e0787370ac0d46ca82d3cb31d15d0ea","sha512":"99830735da3f51fcb6510a5f682638c2ded1a875790cdc5ed9eb928decf8d744a48e107d92af6db421b666a86cc88542c187c2d2a0c86535937143bbe898e15a","ssdeep":"","tlshash":"0f2186a083a6d43d83809166c37493097854302efe529640fdfc8a8b1ba9d4c6c23efa","first_seen":"2025-03-20T08:45:19.929797Z","last_seen":"2026-05-22T02:08:47.27492Z","times_seen":1766,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/vendor/animate/animate.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/vendor/animate/animate.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\ncontent-length: 3318\r\nlast-modified: Thu, 09 May 2024 06:25:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c40-b148\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa2b9d712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45384,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (315)","md5":"26a9878d9daaeef756d1201c6f959433","sha1":"fee59b3065763a2df7b6b3853ea12879c42ba597","sha256":"bab20297b929ddb009abec49f15f4b403f5fffe086102090988ad701cb8eb273","sha512":"d524ad6568960b0d2634f8546ffad149762b6aa947ef1ea93386f67e3397def73b1f78ce95261c3be9d7d1251c34d57c870e954154090bac10e4b5daf8c709a6","ssdeep":"768:cB3GBIyOvdfwB1IAtkBDK3kyr5ErUe00QT2:mwB1IAtkBDK3kyr5ErUe00QT2","tlshash":"c313a5aa4ce1224494260e15cbdc9ba84b3cc76364b15cef3386384bc745bee23de657","first_seen":"2025-12-04T05:42:45.895074Z","last_seen":"2026-06-13T01:24:50.35481Z","times_seen":826,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/js/frontend/desktop/template_v1/before/index.js?v=zeb3as38jmmuznyrdtuz","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /js/frontend/desktop/template_v1/before/index.js?v=zeb3as38jmmuznyrdtuz HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Apr 2025 05:40:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fdf153-3078\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbbdfc712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12408,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12408), with no line terminators","md5":"6e5ce401fa29e20cf8f52e5d754a5d5a","sha1":"b55566fc452442bfffc73943eea5177ccd00fcac","sha256":"7f1d23659e76eca87d310351b7598a64201f99a8be2a947319f0182cdc3b0cd2","sha512":"e4ac4422d6aeee85a36002a6ca346faad7e1de6510ed0253b2130dfefba2bf6d3e186a0907af294df5d71118a002f6dfc6cc9f2e4e9eef40ce374fed672bcfd5","ssdeep":"192:ATn2PoqeRfRll0OR4HCcbNQNJ/OhxwBZcAoL/3eqnhqgSt081qq44WIzEtMyCGWV:YpqEPRfeIJWhDAoSD3t0mlxWeyOfOydJ","tlshash":"3c4294c8b6c6f47503d36670902f1106f23a6919b51d9480f72de9d2be7884ea237fb9","first_seen":"2025-04-15T10:15:48.992845Z","last_seen":"2026-06-13T01:24:50.348264Z","times_seen":1847,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/skrollr/skrollr.min.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/skrollr/skrollr.min.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-3048\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fb9dce712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12360), with no line terminators","md5":"7d6ae9201bf4c1d83ebcacc6da3ec09b","sha1":"65b20f0c1dba10c7ba3d644fba7ae80ae08d4ced","sha256":"911dccc7a59863b46d628fdac57d96a7cbf72325fe2555d2a3d165c6258d3464","sha512":"023903172cf7ec0d5fb06f0ed9dbe90146ff5b2ddb8bf5db81f9587078d28d2c9cd22808acee7253eecb779142e92e3b708a2b167a7dddf93ae26cd92bb5c6c6","ssdeep":"384:r/UqdA5yNpXXTLLeT5RyFNPsJ1S+Cmna5WbYBQeU/pBr:r7o6TLLeT5kXk13Bbt/pF","tlshash":"a44209ceb549b47043c375e6c10f5249b236589de8088465ff25dcdbac38c7a01abf6a","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-13T01:24:50.304673Z","times_seen":2403,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/icon/icon-roulette.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/icon/icon-roulette.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5961\r\nlast-modified: Thu, 09 May 2024 06:29:42 GMT\r\netag: \"663c6d56-1749\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fadc96712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5961,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"4c00c62f6892b38be72ff21ba77bcd4f","sha1":"cd3e7855bd7252fca7ee624819769b219e62afa9","sha256":"df04e5456a26d89d36120c6078dadfb6e84b37b635c5b8f75a1ac75c27e1fc41","sha512":"b143dab0190dcd15de7220ee69def82732824d01f60d6428abf03d772b6440ec01d85bcbbed4d95209ea157d3781d892bb62502ba29f6624fa33c463ad78145b","ssdeep":"96:dGyZjfHeWJzRdWClke5tzFNN3CEBqm0SIlzE47ge6+u1qlTc/7jz7Gs:dGyZjNJldWClkM18fm031EhUczjz3","tlshash":"18c17e611b7d5036cdba10f1cb66b21abe0e5f8029c54eb54d3936499cecb7244f906f","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.432764Z","times_seen":1815,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18859\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"656632a7-49ab\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 462781\r\nexpires: Sun, 18 Apr 2027 17:58:05 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ne%2Bqzzd%2F9Ep6Yu2XH%2BohATjo%2F49AZzpbLaKACp2zQqz9XYZb2a5x%2FDD1srena%2B8wi9CaoQNdEml89cEE1dQobFXt3uwu1o2mLUo3NAqh81vxb57OCG6%2BAFfXEOLnqPbkiy2EReJT\"}]}\r\ncf-ray: 9f37f3fa4fb85697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102526,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-06-13T03:10:16.5396Z","times_seen":11426,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/owl-carousel/css/owl.transitions.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/css/owl.transitions.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-ef9\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa4bc9712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3833,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f30d5b54fdbdd797fd2b3984d86212f4","sha1":"22d9d642188022c65959dc9edf6c430613a4c15e","sha256":"e3f2b6c8ada6af5eaeba55383228a50eeef1f88613e3d436ef1d1c925e9ecb83","sha512":"efd728d75a314a92e128ac9e82db38c333469211b6185f39ab53bc5dc0c29e3ef40cc9d755f66060ef680db0cf36628004d55b91784df7f10034373e2b7cd35f","ssdeep":"","tlshash":"4d81386f81921348949b0781bbd8f6980b4c899264339cff71c97d9bcb046de53f9a1b","first_seen":"2023-04-27T22:13:16Z","last_seen":"2026-06-13T01:24:50.419337Z","times_seen":1076,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/panin.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/panin.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 7544\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-1d78\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fb0cfe712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 100, 8-bit/color RGBA, non-interlaced","md5":"37fa040c2929dc9063943c5ea2ca3622","sha1":"56fb45e917da5788ca7f767daad839f96d8cabef","sha256":"cb5d8a5e20e3aee1333d24ce82fb36025b895146dd7f1a602cd921d828e1fbcb","sha512":"4f582660270837c6c6b08b9e36ddf745bdfcc78c2e3b2517e3292a825c7699ddf9c5f9d7c120e2fcf204ccbd667e4c7ce22fe53a0c511c05506775cf31885898","ssdeep":"96:TX2/2D1siKZKj/d/NN0qDzh8aV6x+JalPWDNNgqVjIycerHuD3cXX566E/6Zo:TJ5xKZU/juSdV6iOuDtL4cXXc6EiZo","tlshash":"12f1af5cb99171e140624af206fc8162fd3b1cb642d9f1ad70a6fa9da0c153512be2cf","first_seen":"2023-06-01T16:10:36Z","last_seen":"2026-06-13T01:24:50.35062Z","times_seen":766,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://toto911mania.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 10:05:58 GMT\r\nexpires: Fri, 23 Apr 2027 10:05:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 460330\r\nlast-modified: Wed, 14 Jan 2015 22:46:57 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26528,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26528, version 1.1","md5":"b20e0cef1fd0ee15a5fc0d150d4c9672","sha1":"7bef9051bf8ecdf269228c6e743dad5a8172aea7","sha256":"47a6d754139b198b90326c9ad8c22bd5e2ba5e2d7e2eeb443deed603255a611a","sha512":"cce8eb93332e18c5d4897c004ea1241f012cfa17da4f05ce87b3246e56274f9d561a4c2b49bada58f1d5d1d8f17db5a448e4bee78c0d8e3dd9a5047442d05b4a","ssdeep":"768:+fXipTa5SqjK1O4v/B7ddk/IxEjeRUVC8cy5zIQaqK7nP:+fXipTwf8/xc/20lcbP","tlshash":"e4c2e05f1bd2984df671483cc2bf5aa9f18053eb13ea7a745f925a1c22a15d50a032e3","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.324313Z","times_seen":2257,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/global/banks/gopay.png?v=1777399084","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/global/banks/gopay.png?v=1777399084 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 4046\r\nlast-modified: Mon, 14 Oct 2024 05:45:06 GMT\r\netag: \"670cafe2-fce\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fafcd8712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4046,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit/color RGBA, non-interlaced","md5":"50248070ce64c8360a5576e782f23e68","sha1":"a14710eec9377c1200f0af4f13c2518e0d15fcc8","sha256":"c1e6c3f3fa6029282b8d718f2088fd4dfd5ea272fcb63bc37f95e66df9918df2","sha512":"df620d681efa293af6ada8fe51d4910ee1cb3fed2e7932cf618ef113ce33bd4debec0e4c40cebb7a28481ecc356add8d3acb03103d0575f7074a50c4dae79d8a","ssdeep":"","tlshash":"04814cafbfd17f40569260d208e484931f360dd1ac91e6a2ac95c8de34a19fe1985fc2","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-13T01:24:50.294493Z","times_seen":1869,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/js/vendor/appear/jquery.appear.js","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/js/vendor/appear/jquery.appear.js HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jun 2021 02:54:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60c6c4e6-610\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fbaddc712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1552,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (752)","md5":"5fbd164d0b2001df2ba85327fc6bab39","sha1":"13e083d8852729d2e6cfa3fbcf3955a28275fd00","sha256":"5d19547b40e94ab90e831bec03fc23d4b894894bb93006b3b3fd8d62e2f355ca","sha512":"5e667b534b3c4cd17e92d4404055e434be7bd07544354a2a1ba56947468799525dd86226e0f1f9d0015421941dcea765c566c1d6a8eec4e1106f2e9bf2064f7d","ssdeep":"","tlshash":"6031ff6b31db3a9556fb703fb61f73155221853b0251e052d9fadd7c39b2d42b803a44","first_seen":"2023-03-07T01:10:45Z","last_seen":"2026-06-13T01:24:50.372147Z","times_seen":2394,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/json/floating-icon","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /json/floating-icon HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://toto911mania.cyou/\r\nX-CSRF-TOKEN: EMES3zwuNUxmegLitgd8fOAAR44hL7XQC70oGx1p\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: application/json\r\ncontent-length: 82\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: laravel_session=eyJpdiI6ImUwcWdTbERWZ2pvcnp4VWZTSmM0THc9PSIsInZhbHVlIjoiTERrVTNMMms1ek9pUzFaVzhnVE02Wlg1MkpIVGF1QXdaVFZEenFUNmliVk5LWDN0SmNFSEVsbTZtSk9QWkJCNGdnTDF0TFc5UkxiaDdqT25QeTgxMTJKOEN2dnZqUDhFSnY0dmdXMHFvUmw1MEJVbXJIQTJTTWc3QmNRZ1d3dFZMRU5leDZFQUI5bEE3Rk42T1hxbDZhbDN5V2hBVEoxaTNrc21lSnVGQ3hGQWRPVVVISXVKRTBvQ3BXQjJZWHN6NWlBZTZpcWVEMEpOZDFGbWYyL1lwd0RKZnVqZDhrNWlNZmFwQU81M0lTajkrSHBLcVJENGlIUm5FQmZmVGdYN2dVc2QvU2hCTFo0QmJVbENQVk45amh6UHkvemVua2J2UkN6b0V0dy93OEZsSkphQmR6eWp1MWkwd0w0aTVReEFza3AyeEFnVVlCMWgxR1E1KzNIdG9XRW9YWHpFTHM3MDYrcDY2aHoydlNaK1JUdVVOdkRNYklEU25LdGJKNkZnVmdDSENnZ2RJc2hnVXIzaHo3UFFZUWx4WUFnSU1HUkJTWmVJbHVOOWd0TkhEd3lMUENuSGJ0TWplaVJpd3ZIazM1akRMcldjVi8xWkIyTVczN3JEYXl5UnVjMzlOUHQxTkoxWnlReUpRSWQxN24wV1Juekh1cUhFTzBiYUxUbi8iLCJtYWMiOiI3OTk3YTA1OWRiYTAwZDdjNGE4YzZhMGY2OWQxMjEzOTIwNmJhNjY1MmRjYjg5YTljYzUzYjkxZDM5ZTYwNTJjIiwidGFnIjoiIn0%3D; path=/; httponly\r\ncontent-encoding: gzip\r\nage: 0\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9f37f4092ef2712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f797622117442eb8017a29c9b63e0d95","sha1":"e551a73ed156633b16a28db531fd51f1721811bb","sha256":"678b72a40035fb2e414d41e9c938856b7d831eb6f364a35369f56c239ab837ba","sha512":"0c59e2b1a38e703cd1e3175e2269a6eff388fd7012c51cb2fe0eca45af1e1eb6ad4f22cbcce95bab750e349af0d16206a86e41d39068bcb80874a29f67ea08a6","ssdeep":"","tlshash":"86a0220022003c388f002acbb0002e002ef03822c82c2880c00c200c8ba80ebfc03002","first_seen":"2025-04-07T22:45:34.719026Z","last_seen":"2026-06-10T05:27:52.239983Z","times_seen":1833,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=14255541\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Ftoto911mania.cyou%2F\u0026channel_type=code\u0026jsonp=__gi7omvgep26","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=14255541\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Ftoto911mania.cyou%2F\u0026channel_type=code\u0026jsonp=__gi7omvgep26 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://toto911mania.cyou/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://toto911mania.cyou/\r\ncontent-length: 390\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (390), with no line terminators","md5":"3876c518b1422104bccc38443cb91fd8","sha1":"9700c8fb1e00580d0f7c2668483715ea14d7b618","sha256":"9eff3c7e4a053e53065975d4f0bd5602b1bca994a03a0c531f4035999c7cb1db","sha512":"bf263957910fa957f278403dfdc19849f107102d17969f8f5157343ecc9eac8896e0ada74a2c6349ec8caf7445bf3d0d6233d1a7eeff3a2ef0aaa4994eefcc81","ssdeep":"","tlshash":"2ae0682fa2059d318ac0e7e98900ba41ee340762a64628fdb4ad1332921f39e833150b","first_seen":"2026-04-28T17:58:37.481604Z","last_seen":"2026-04-28T17:58:37.481604Z","times_seen":1,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/gif/btn-promotion.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:08.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/gif/btn-promotion.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 17:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 616574\r\nlast-modified: Fri, 17 Apr 2026 08:29:14 GMT\r\netag: \"69e1ef5a-9687e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UNs8fti8yVpm5O0JJMTVNUTW4NkOufrdYVCZU4qC6KBxNadS478WvuHUEsfZdDKfdgT9sUe0sbSrFoj776yMZUF3lpzEW8F46PtKLqIpFW6g3mtnxSJ7r26ehI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f4102afe23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":616574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"077f6f505ce75a91fdb0606c787c8dbd","sha1":"1bb7644c182e632c379e9a511d98f474a66eeaf5","sha256":"62501b7fe9f9489c63cbecbcd918b7a28f42213571bfc1abf2405b20a8629da4","sha512":"29b7deb2ebb527be0f19ba7fc9883a7f7bdecb890c38744bbcf0a76d11deb6a56e6b4ab35c3bd58e329b5704dcfff32ab2b4c37bf0174414b3531a8a8831ec37","ssdeep":"12288:07Qz/Q7XjE84DTwDkbnC4cd1dhmEEdPcwTKt/uncz20iQGG29W1pQC3:wBh4X+kbC4sgdPcwTKt/ucz20iQ929Wv","tlshash":"3cd42342fe6238d4f56248fd188019eeb0347d8e491564dcddd93eafac23b112af9678","first_seen":"2026-04-28T17:58:37.482416Z","last_seen":"2026-04-28T18:23:04.493007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/css/vendor/ribbons/3d-corner-ribbons.css","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/css/vendor/ribbons/3d-corner-ribbons.css HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 May 2024 06:25:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663c6c40-1598\"\r\nexpires: Thu, 28 May 2026 17:58:05 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f3fa3ba5712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5528,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (428)","md5":"88b7c3a6414f46ea6d8487cf9f210ca2","sha1":"bd723876d02bf30eb94170476a9c46dafc3f07ea","sha256":"20b434a57bf4200f827db0dbbef637b3a0ccdea4f0115dd1df9f9cb3aebbbeca","sha512":"147a623bf4e9b7cdb2eeb63c974afe76d51491531493e750fc563fe247880deeb8cde6d72819b94b7e44f7dc425cbc347de2f7b7a0b9e0d14e2dfc481f3f350a","ssdeep":"96:qSV3jnnDckrtESMXWgu+4C7+yG1eZu3n6emwZyvvBfUGNASc7X0IqjJtd:q43znDckwuAckibmrvm8catP","tlshash":"edb14a159c9990e8e217811fbbf9be58c72d9153ad11ceaef306e4f7036a18810b6f53","first_seen":"2025-12-04T05:42:45.855298Z","last_seen":"2026-06-13T01:24:50.371274Z","times_seen":819,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/gif/slot-online.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/gif/slot-online.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1146382\r\nlast-modified: Fri, 17 Apr 2026 08:29:18 GMT\r\netag: \"69e1ef5e-117e0e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwrYmemhvx8YFyXHzeR40QC9TSpl%2BHXZH2s8TNNoPSrPfhVwP%2Btj110RbHMlNKTfWIqMg13z0d7%2BLvo4pJ9D5Gm2%2FxfQF7z8RHfIMPwo3Y8JvjCirwq6dapEpGA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f406699023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7379d5a02fac83efd5850b64f6c2909a","sha1":"ea43b23eb804351b5007f56516a4ca3e58d08eca","sha256":"f2a0415590f7bd218c8a668a74cf1731a66bf05a14b40586541568cd09a7ff75","sha512":"b9c7a89277fdaab1cde330c752e339a43b3a6cf1a21764f7fd9d6fb72e5e277cad220df1b3011c685151dfd4a3f6b29892639ec8053499c2db0b443f47531a1c","ssdeep":"24576:ahzAntt3Tr2OImFnR2pSUSPkGJT9h7mCBr:NImFDUSXSk","tlshash":"b125336c47c5190dd0b20fbbb5ac6004b0527a22c39d53e18456fe933aa363efe27762","first_seen":"2026-04-28T17:58:37.483774Z","last_seen":"2026-04-28T18:23:04.485676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/img/cu/bg.jpg","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/img/cu/bg.jpg HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/assets/css/cu/cu2.css?v=1777399084\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 266175\r\nlast-modified: Thu, 09 May 2024 06:29:40 GMT\r\netag: \"663c6d54-40fbf\"\r\nexpires: Thu, 28 May 2026 17:58:07 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f4064b04712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266175,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1103, components 3","md5":"803ff63040b8a2ce02ec92d07f791dc5","sha1":"e16a1fa7b19e082f08eadd99e28e0a923315dafd","sha256":"4267bc3dd58056c826f1b5a0c0a2b8031db13da9e0390b05ba47666cd2cb82e1","sha512":"809a4ba42c3f5e54c2272d2208bc711ac84a36a271f3058802db1d609c48279e25cca1553c7916f88939894073ae64f3f97f835d99deaeb738704e407b63851b","ssdeep":"6144:/upDYTTj9yKNLJFZ7bsqgpiw41IhbeZPcWvQ4:/ODYTTM2FZ7gpiNIlaUOQ4","tlshash":"7d44026d984b4eddeb3313b4665c7679421ac0ad2ec877fa014721ca12f9578f68133e","first_seen":"2026-04-28T17:58:37.484612Z","last_seen":"2026-04-28T18:23:04.514252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toto911mania.cyou/assets/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"toto911mania.cyou","domain":"toto911mania.cyou","tld":"cyou"},"ip":{"addr":"92.243.74.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:07.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toto911mania.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 08:56:25 GMT","end":"Fri, 24 Jul 2026 09:56:21 GMT"},"fingerprint":{"sha1":"88:83:63:D7:0F:F5:62:0C:8A:25:7B:24:52:E2:AB:62:BE:EA:E8:1E","sha256":"E0:26:97:AB:F9:99:77:C8:35:23:2B:FA:3C:92:56:BB:EE:3D:BA:A4:48:5C:0F:00:97:16:B2:FF:1F:91:2C:4B"}}},"request":{"raw":"GET /assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: toto911mania.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/assets/css/font-awesome.min.css\r\nCookie: __cflb=02DiuDYA1y4yrb3ynsUAZ2Frv4FA3ksx6K5M22S6yjzYC; __cf_bm=acZHuLKQgzw3PPlAKWVaKimAtR5l6TV5pEBfTPGdhFw-1777399084.108708-1.0.1.1-ZE.63uOQseM3jKntJUDp_VrRHIRFU16M030mrR3IKyeqZGO2IVmKXF9HaBowqDu59nTsuWdH6uwQOZIl9GHdjkGCvaNDg7nSatFZDFf8I2UybfEAVwd3zNTmwYcUbpiZ; _cfuvid=qUtra66eOb5s8KnhdCc5OTHBkloQuGiKVd4ZBZr8VLo-1777399084.108708-1.0.1.1-s1Lz.CkySSZ4BbfXNd_nUVNEkg_HIG1hWI6_ZVfgYBo\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:07 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 77160\r\nlast-modified: Mon, 14 Jun 2021 02:54:26 GMT\r\netag: \"60c6c4e2-12d68\"\r\naccept-ranges: bytes\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nexpires: Tue, 28 Apr 2026 21:58:07 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9f37f4067b35712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-13T03:43:36.678287Z","times_seen":494516,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":421,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3open.icu/images/situs-resmi-toto911.webp","fqdn":"3open.icu","domain":"3open.icu","tld":"icu"},"ip":{"addr":"104.21.20.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3open.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 18:41:22 GMT","end":"Sat, 20 Jun 2026 19:40:00 GMT"},"fingerprint":{"sha1":"EE:48:FD:30:E9:BB:E8:3E:E5:DA:DA:0A:8B:24:AD:BE:2B:65:41:5E","sha256":"E4:D6:34:2D:D5:6C:50:BE:2A:74:B9:F9:C4:8A:FF:40:B1:42:94:06:4F:51:C4:1F:80:37:98:1D:95:BC:4D:0B"}}},"request":{"raw":"GET /images/situs-resmi-toto911.webp HTTP/1.1\r\nHost: 3open.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1176096\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Apr 2026 08:28:38 GMT\r\netag: \"69e1ef36-11f220\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hfKSxkHfbzyDjLclZ4vwHVDYlYLM1vO6NngwDVWQRn4fKHuQ9z5uW5uPP7ctq2xy0NJi7dijiZoypPRe4aqYlK3TOIzztCDrYHvGaJEI%2FLbp98m2p3eBJDXWcUo%3D\"}]}\r\ncf-ray: 9f37f3faacfe3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176096,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"904abdff97316683fa4c20e40f711529","sha1":"27ea01b78b01e2f1c7f9473436ab2d24209d5968","sha256":"7dba33d8499d6add49821debbe2521a5373e16e79ae737e8aef723bf02000bf0","sha512":"a7248bad28e8d9a12c8837846fa6b2ccf9b388bea7b7b676a6d2c22475010b4cd0efac478e85b2d1da6542c99104cdf60bd0276a9571241866ffade6b1266da5","ssdeep":"24576:O8S62xHOAbEjKhYQzSu68xUtauPmFvSM3uD0y:O8S62BV4jK368ytalSSuD0y","tlshash":"a32533c41688e685f622a32d8cde7c7cd4afd5bc00f5a262acd6fe951d2335ab240dd4","first_seen":"2026-04-28T17:58:37.486075Z","last_seen":"2026-04-28T18:23:04.500177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1231,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/dmca_protected_sml_120n.png?ID=c2cef290-c8df-4df0-81b5-0a7f46c8a33a","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://toto911mania.cyou/","date":"2026-04-28T17:58:05.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 18:02:24 GMT","end":"Sat, 04 Jul 2026 18:02:23 GMT"},"fingerprint":{"sha1":"2D:61:6B:E2:1F:84:60:5D:3B:D2:33:18:D8:BA:56:38:DC:47:29:43","sha256":"3B:55:23:65:A9:74:AE:45:C4:76:18:C5:04:CB:13:36:94:A3:98:2C:4D:13:F6:B1:B9:6D:6D:17:7A:28:CD:C2"}}},"request":{"raw":"GET /Badges/dmca_protected_sml_120n.png?ID=c2cef290-c8df-4df0-81b5-0a7f46c8a33a HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://toto911mania.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:58:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2060\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31536000\r\netag: \"a7af7333e0ebca1:0\"\r\nlast-modified: Tue, 04 May 2010 23:19:10 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/24/2025 15:25:22\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/dmca_protected_sml_120n.png?ID=9ba6f922-1a4a-4b0e-a215-7e2304edbc64\u003e; rel=\"canonical\"\r\ncdn-requestid: 50d2ec3754551495eebcf4b49e191b9d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 121 x 24, 8-bit/color RGBA, non-interlaced","md5":"ac1d05c6c81bec88b7df6cf4c5a2374f","sha1":"fbaa6f8144acc99822941e7c1da42ee505773adf","sha256":"45ec09974d948120c9f97cbedd141f4fa8df876bd2206f0c41133ae3a13fdf13","sha512":"74b7e24e90a13a972a1a58f01ea50f2dce9a53b8724da0acdf639f81c0787bea1276274a5fe125c00b136812a71fe6d6918e9c004792eadc572989ac3e8e82c4","ssdeep":"","tlshash":"bf413a38dd02c8102b3aefaa193fdf88c39668d9d53cd3a8ead526056744998d1e6202","first_seen":"2023-04-05T14:04:03Z","last_seen":"2026-06-12T19:58:18.008607Z","times_seen":669,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":65,"connect":2,"send":0,"wait":1,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}