{"report_id":"d49f9699-151d-43b9-9cd4-1cef204acb6d","version":0,"status":"done","tags":[],"date":"2026-08-03T05:13:39Z","url":{"schema":"http","addr":"grandmoney.top/","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"104.21.73.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"grandmoney.top/","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"title":"Grandmoney: Online Crypto Casino, Sports Betting \u0026 Prediction Markets","dom":{"size":225057,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45183)","md5":"ae90bdf93ff04f6be2587c3d262128ab","sha1":"08a3211ebdaf6ed7e3840de214ff36af342768b8","sha256":"03716fa3821436d90250eef180f5b06822acdc415f642b26d8463bac24449222","sha512":"50272051bfbbf92f3dc440746cb6ee442bb75cfcc0782a49755a28fd37bb1ac5c8622e12439a4163ab1a017b977f23b13cfdb69d99a8477457135d148d0432cb","ssdeep":"1536:UpQv/ebx/c64Jysq7vneh2hO5CLV5GnoNkEBJ1B3Dpx7daHezHeDHeZHe7HeSHeK:Pe7xJj3Dpx7UgeCwFIIg+vIHKh+9w","tlshash":"e424fa741202057d602747d0f990f39fa2abd255ee97c90eb3dc82d71bc2ca4dea96d8","dom_hash":"domhash87e00174291ea28b35037ce33616a2e9","first_seen":"2026-08-03T05:13:46.896323Z","last_seen":"2026-08-03T05:13:46.896323Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"grandmoney.top/","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"104.21.73.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-07T05:13:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mycasinoapi.biz","ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-04","domain_rank":0,"first_seen":"2026-07-10T22:57:00.871632Z","last_seen":"2026-08-03T05:12:47.185768Z","alert_count":0,"request_count":37,"received_data":2307077,"sent_data":20576,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"grandmoney.top","ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-01","domain_rank":0,"first_seen":"2026-08-03T05:12:46.568373Z","last_seen":"2026-08-03T05:12:46.568373Z","alert_count":0,"request_count":13,"received_data":1844510,"sent_data":7588,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"op-api.gambl.bet","ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T22:56:41.726368Z","last_seen":"2026-07-28T15:49:29.658866Z","alert_count":0,"request_count":3,"received_data":3638,"sent_data":1721,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"grandmoney.top/assets/share-2-CgZi4XxL.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9160a0ced55e11097b5e6dff069bd771","sha1":"4e660fe68c4125f18319545e631a8b0118758fa5","sha256":"418cb8559dcda0fcce500c8c8ab0d7e6a702070457d1cac6cb225de3feabe4cb","sha512":"f6db5a801f765f2941b456eac98aedeb0ea38f8cd8fbcfcd87efdcfc89898e62b68e99044b90d67c638954c8bf78250fb499ed49e340fd5dae0003a90702476d","ssdeep":"","tlshash":"65e0d85bd4e38d5b201099c83f834570089b43b223898553c347e75413904d7370cea3","size":358,"data":"","first_seen":"2026-08-03T05:12:55.587108Z","last_seen":"2026-08-03T13:33:00.384987Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/CountdownTimer-DXhMFNZE.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9243acc038112504653290412add2754","sha1":"9bdd5d6c7a185d5ee6210656ae4f003bf104e7d1","sha256":"4aaefc69978ccf6df6fc9837b9740c289a995be2df8a70c413abd3787e2a799a","sha512":"4974fe9e6f26434a631851feac727d394edf5cd52d95e386783ef6e2d411aa6f5152acd4fa0d77c9f0941eebfdb5307972341b1a356bf9c2de08c08386193a5e","ssdeep":"","tlshash":"0321e1c7b145f4dca6b3088c252f5031f01a4324eb8e4aa0d13c98237f39095f999b9d","size":1157,"data":"","first_seen":"2026-08-03T05:12:55.570499Z","last_seen":"2026-08-03T13:33:00.386765Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/SupportChatPanel-ClQpdX71.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18249fb6d17e497954cab65051a846d8","sha1":"b1c9ab38db68d6107d920800a83b0dc10e5d6e40","sha256":"71828b256a4adf042798c41636289f492219145aa2cf954b9c36b1d1b7937dc5","sha512":"642902b74bde3f98a915a729bc2b0421357170b376ff8b03a1fd40955e90768aef13fba21acc25c43cc606f2af3e3111bf4bb6f5be1afe77958e63745efc2a54","ssdeep":"192:YDf020ix1N2pWokLLVnCsFMVs9G71eiQVVl6UFn7JBuscl0Vu/NRAxk7wFiqDX:YD020ixv2pWLnCsFRQ7wiQV3n7r3cGVb","tlshash":"1c428504e051af7ebb372ad9be5ee008b01d4f98d76e9d11e1fe64221689191bd633cc","size":12056,"data":"","first_seen":"2026-08-03T05:12:55.590441Z","last_seen":"2026-08-03T13:33:00.35466Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/GameDetailsPage-Mbctj5Y8.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5fe0d2c0d687156dce6649ebb00e553","sha1":"56242c96a3ecc7c2ad8ed943f9b428be8dcda4ab","sha256":"5503e49aae350c162ca0888fd1f3f4247c07e1b140b15e4d9e23f4d70bcc6273","sha512":"a58b8a61dbc751c0c09f71fa2de4a5ed5fa80987f78a657a04fdf827e6cc1ec4fa3691b0657864f336ebbbb38660eac7f6ce1ba6a0a243c56f388970999a23d5","ssdeep":"384:fiGJcN/ybzTCK39Eev+tfCDhXq2onJOC5eXXRiXLVYXce78RTLW:fiGJcN/ybzTCK39EUdDE1nJOC5eX0ZYx","tlshash":"d082d588f041b7fee97f0c94756fb059703a2b08ea5e9a81a0be28212d9c1517957fcd","size":18555,"data":"","first_seen":"2026-08-03T05:12:55.592113Z","last_seen":"2026-08-03T13:33:00.383927Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fb16286dcbd444a866573017125e001","sha1":"90d0256d8d59ce786cabf3834b7418c8d4953961","sha256":"5aa2548b526d4036503af6bc1316037dcfed28206e2ab9ac3728d0a15bc00046","sha512":"b0871bbb37283222e1a8dcf1f59271b7e34d398a4a974213c1988086c1d750fac1f9c87438b3577295304573ea8e6e880537fa3c6b0462c32f81779bb246d7dc","ssdeep":"","tlshash":"17215b44ebf569e5013370380a0f2404e6209467052dbeb07f9cd9a16f9452d87eeb55","size":1132,"data":"","first_seen":"2026-08-03T05:12:55.574985Z","last_seen":"2026-08-15T05:46:47.495184Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/vendor-i18n-DUl_EuQy.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9b608f1f1295dada7e3bd5c53885e0","sha1":"938f62996561bf1906bd205eeff8e7c6c26a2977","sha256":"c3a32b396502ee83fb80b11eae02a203a5f9625b78e4c3e3bf946cc1cb8dd1e3","sha512":"fb65170d5dadbede34808d5209c4be82b3003633987a0a9bbe40bfc7053657189314fa61382df4d35b40f95fb6c3db898c4fb48cd82d27e9e3348543291d39f5","ssdeep":"1536:Zbi7OVOGuNi+6EOl6ZG8N42fLm3NfLiaphW4:5JV4OcZzN42qM89","tlshash":"655319c871faa62643ea40d530711408f739ad583448644dfe7dafd6e8d3a0a92fbb34","size":65350,"data":"","first_seen":"2026-08-03T05:12:55.439388Z","last_seen":"2026-08-15T05:46:47.483642Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/vendor-react-DhQyWnmE.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b83c56000176b609171ae4571277914","sha1":"627849bf3457219fee7bac71205a985c4fc35698","sha256":"6aafecc18ea6033067f708a61c2a9674857ba9c9689d683832caf7764f61cf86","sha512":"9d38f9043b86a9c68b665975dd1e2bec2e25946cbc49c3602527b7a0d37a2fd9e300e33edccf20a8e0148a984a940d53aa82322a15c84d2ea2fa398e29352426","ssdeep":"3072:zuHaZ6Qx6nlBYORKSYZOP7JWOlaqEGJONNMBRawLFi0W67ZinO57Nx6aaEqEy:zuH86Ft5jEqON23g0RVZLA","tlshash":"95543cf831aeb5265fb352b540af010772782c37184d8860b154eeae36b584961bbffd","size":285034,"data":"","first_seen":"2026-08-03T05:12:55.435886Z","last_seen":"2026-08-15T05:46:47.465872Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/circle-alert-_SVBI3LP.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fc70fd0b99910c0ad452828489fcc2c","sha1":"7f0205c2e3ef8be2622192d76dc33ab064725efe","sha256":"b7fe008c8e0a8c2a4e4a2176139a3c82ce6358c66c86f2674cb32dbe75a59c58","sha512":"73e70525782948e73a97825bd8d9803ef49640b9ccaf7514bcf36d30cd6ae7a6587b3374d02e595f34c15935e388dc5b41d99642f9d4853eb5d44ace3664763c","ssdeep":"","tlshash":"d1d05e6fc69649aa0014918c2b46841189e6039a3fc98822d1828f168350e8b365ce03","size":251,"data":"","first_seen":"2026-08-03T05:12:55.572804Z","last_seen":"2026-08-03T13:33:00.363735Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/gift-Yutm6GVG.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cee37eaa090b1efcef6c2ffce2451c1","sha1":"3d840e09c0f34a6669670e477152759cb29d3f5e","sha256":"af6eab3098a129aa76612a2e3f8a67ccfe7fbbfd0d4ff13a4f0e277b33cd4c9a","sha512":"217b17d928f5b5a522d9b0fd26269676635ba54b6ffd59c9af97e38094dae9f7171ebc6f5166fb398d2d7721596fa2c62d825f66f4cc0d53985de49578e3a63c","ssdeep":"","tlshash":"e4e0d83f4e5916ee5d57d18c3903751147ad43b873595c10e00fd1314215497c9b7605","size":357,"data":"","first_seen":"2026-08-03T05:12:55.59744Z","last_seen":"2026-08-03T13:33:00.364664Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/maximize-2-pvWQbhTY.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32dbcddf55a8c37baae356423f876eec","sha1":"3a3b763dd85d13f767eff98e1658f74fa44589c3","sha256":"2307f91e429c80f1d2a16ccfa621f232292019f154c56b69ec0cdeb1eaa9d9c4","sha512":"e2f2f57b7c7418ba99d480db611150405bfe920b04275b5cc23edd349b75a70c364b21b51af23217c7d6cfedf2697e5b8da449a29b11210377b591af8ecb1487","ssdeep":"","tlshash":"6ad0a70f9bd040f32805e78d564379424df543ad37c24c82f0561235c3355936debb12","size":239,"data":"","first_seen":"2026-08-03T05:12:55.568132Z","last_seen":"2026-08-03T13:33:00.382614Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/vip-rank-DPhs1HEl.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9a10a9f77354b0ea10b441221fde84c","sha1":"e5843a33abe01013121192502cf3b7c089cafbff","sha256":"466824f82fa64628293b57fa66f64beb6b30b98cb9581050a4db0b33047e349a","sha512":"112dcd8c1a5acc2e30330a454cd7afdd8662942c88ee18374259fd2b8c9ce428220ab999c1bf0a0e25db54899fc87d9fc783793ff36d5fd2c314b2662dcac661","ssdeep":"","tlshash":"3051b7db519ca9b235b68ddc822ca1682cad1bd7f011e2ac30fc7ebf531611050abf58","size":3020,"data":"","first_seen":"2026-08-03T05:12:55.582393Z","last_seen":"2026-08-03T13:33:00.35594Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/kyc-display-status-Bibwcg7m.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4becee6ef3a3c4ed1a4e2ac3b4b1cd0a","sha1":"604dcc5d823ad1427ebaef3518fabd6c371a4431","sha256":"d64351a59f295356a3817a72b11bf13475c3a227cfa248f98f3b7bf922a769ba","sha512":"d6a4be4324f5fde617559465cc429d911375df3e29424420994e05eda61130baec9e5478a596830719b4e1525ebde9685a9c0274147d3fbd207bc9aefe7bf486","ssdeep":"","tlshash":"a2f04167bc9ef271b7e335b9d009f48d423477b43c21608278d328802c2802af30bc08","size":580,"data":"","first_seen":"2026-08-03T05:12:55.576832Z","last_seen":"2026-08-03T13:33:00.370106Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-16T12:31:28.19724Z","times_seen":382180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/SupportChatPreviewBubble-r-A8HdwF.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2398f76a7f86bafc0088528ce3c82de6","sha1":"4589da5e5f609959fb5e62ce926c2dd668b2737e","sha256":"58939790a7ab2aa80e2178497bbf7c533fda22488a815600b7a27580c488ff5b","sha512":"dfdacd5e728ae56dabb8887259190198bd821f126f213bf0333e84eb3cba6892e68209e5803bd4a125c086ba3d7d84ddc3aec42c5d1c200d5ba23cba95624fa5","ssdeep":"","tlshash":"d4517806d041bbbea77b0899f75df046b31d4b28c7ed5952e1fed0231a94191a22678c","size":2579,"data":"","first_seen":"2026-08-03T05:12:55.421142Z","last_seen":"2026-08-03T13:33:00.360002Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/cooldown-0CrurCWb.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d50dbbb604b8fc361cce38807993dc94","sha1":"76544903fc9f773e5ae6cabbbb012f8312a3f47a","sha256":"724c46ae110517acf50f722f372e72ded3b0261250be3ad2a55c942af99d9160","sha512":"5d2f5dab7e28481ff58906cf26a7940152bc0f9275fba94c91d7a11133fbb30cddd21d9414a5c2ef7589e0361f32e1729279f7c75b8d86bdb89c9c6ee682d2a6","ssdeep":"","tlshash":"55118c8faec611735500d2881e977813bddc437c72938883f11ba4279f211476ca9f22","size":857,"data":"","first_seen":"2026-08-03T05:12:55.588935Z","last_seen":"2026-08-03T13:33:00.385859Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/SupportChatConversation-D5janIa8.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7173adfee78000f4e2dc09cf89c61c0a","sha1":"98e4a4cdc7470d6de16b7d8521120b448e7948b5","sha256":"93819a952d4550100767f51fb1ec76b5803f9bc932f5f033c64343da34bb6077","sha512":"1301574b827b00f6c5e41ea2f9dfc6f754b0178c4a83c494866db7ee6992be19fbb303f1cd27971ef721852c5c94fd44d501c35601c3158a0c001336514be3cc","ssdeep":"192:BPOAxZ4z4H7aX07Ai4eATKAX0yXRLatYI/bqHQ:BPszS7aEk5RE+LazKQ","tlshash":"f2429641f152ebbdbb370ad4fe2ea40971190fa8cb2eca65e0bd742115581a1b95a3cc","size":12055,"data":"","first_seen":"2026-08-03T05:12:55.579497Z","last_seen":"2026-08-03T13:33:00.367774Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/GamesPage-DxMxntG2.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd932e64e238ba9db3f0a1ed61143b30","sha1":"c6113c1c28d127d989c86bd9516e1e11b2bf5209","sha256":"10799cb2ab7bf9d6d30b2a7e3265a2c54dcd48a2b0111086bc586faa51b491c9","sha512":"6b0da62fb93f6ef5dec3b90efe8a5b47315e4aacf5cb3ba27b9129c8af2f762fb357747dcd11c44bd3e80ccbe635f5677cb108230b45162e70bb6464e7757ee3","ssdeep":"768:pOCzRngzJHE48cfvo3o3YN+V+wUZtPQdrqLEVbjbbglJEBb01gTGc7T+LGY3KHpz:w0T8EcdVbdXz","tlshash":"d8d2c848f151ebeded7b0ee0fe2ea05470190fa8eb3e4890e1bd68115c641ad79277c9","size":30594,"data":"","first_seen":"2026-08-03T05:12:55.599751Z","last_seen":"2026-08-03T13:33:00.369212Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/ProfilePage-iwptxB1A.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d45f7678593a35d588fd4739f8b589","sha1":"de44a346c5d9ca6b6deb6b181b956f56635d2623","sha256":"5dcca3c0e6c10de805700e886dee15e415e4eced07b997ff441084c0dba9b810","sha512":"fb891c8f61e92890ccd6ec9f8df3fbbb45601fb2653757a96fec65cef9b77a76d3409d40b53d0a3a315d5b69b7e8402acbd4394f4429a55db25e83ccd448f00e","ssdeep":"768:8niiSQceqMtJ8C+jMvwV19S+yCQXGEf8EKAPoeLwVaQU:U/J8CfwRMG3EjwAwVaj","tlshash":"b1139498b00d7fbdaa273da0b91f828c302d7f45d5dd8c90acbd1d301aaa56575227f8","size":43088,"data":"","first_seen":"2026-08-03T05:12:55.602388Z","last_seen":"2026-08-03T13:33:00.370764Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/WheelsPage-Dl9RHo8H.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efafc7c605b1ce29a0d146617a045853","sha1":"d27599a22e18b1bcc074bccc41aff5c0913e5c2e","sha256":"a5616af26125f287a4a5f367c3944b0d742bf721948af13e066c9badb116284b","sha512":"added1b6d88bd6b645aa037ace2b0ba072591bdf6a6ddbedb492899eb0688ea4c9fe7b8097b0df8a1fdc4b97069c0f4f1983e218879757fa335ee5b7ab606049","ssdeep":"384:rZDLAWl3YD/sU/Gu6d2FyK0K2FeCkKKK6HLDcE2/rN+6soV+Z:rZ3AQ3Cso6d2TIURKKK6HHcj+6s4+Z","tlshash":"24b2ea04a002fbbff9271ed0ba2e9448700e6f68d61f8950d1be28112abd4d9375b7dc","size":25456,"data":"","first_seen":"2026-08-03T05:12:55.593868Z","last_seen":"2026-08-03T13:33:00.357923Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/VipBonusesPage-DLgS3Y0N.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21ede2bebc91db7d1262918eb0466487","sha1":"51f64c110b640e1dae0852d6b794aad1f5edd3bd","sha256":"66be7921ea9b75ffbe936161fd3c55690bc5f389d367370dbd4496c119a50543","sha512":"1260ece15ca660bc3a7bca0c832fea69497a2e8ca95f48874a1231c308a25d2dc4fe8181a3114dcb51da8298c1c81f141f063badd0ae97f2000775f9876ba769","ssdeep":"768:dMzNXt9zHBckrmRfbawvqwnpZMavGQKkt+oGFrw2kgKfgz0cBuH98EtXs2gAtVXM:6z1bBckrmVawvqwnpZMaLpt+oGFr5kgv","tlshash":"0cf2f9846240b7fdba371fe0b95de548302f6f7cea2bc4a0a1bc58142b98091794b7dc","size":36495,"data":"","first_seen":"2026-08-03T05:12:55.584859Z","last_seen":"2026-08-03T13:33:00.366416Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/vendor-query-blYatFq0.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da59bb21606c81c0cc962cffa9ec93b","sha1":"7635929f1e02268a0ada4dc7c0e5cd6ae48ebf4d","sha256":"5ae41fb91a4951f18905da8132cebab395f8ab7c30234274ec3a6730023a7f5a","sha512":"d32530c81f224a3855143e7aab78ced1bdd32c9cd61a3f0d9bd9061ddd5bde234e2a1f9d91835d98d615fe8509afe294398b9782230b6aa37359b6761152740b","ssdeep":"768:8frxg3hup4aM9hvUmU2yIpof9XP6Iv6GBk6Dr4WIsCYo2BUiEkFREQpiO2Lf+18w:OGU2MFoOE48X8t9Sy8k","tlshash":"d303b8d67142e2273ae18191dc3e4125e2356904340ac06cb6bcade7b963ccff5bea35","size":40788,"data":"","first_seen":"2026-08-03T05:12:55.530654Z","last_seen":"2026-08-15T05:46:47.462103Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/index-DlcATcnA.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"804d61830ff3aa9695f1a9e4aaf6ff66","sha1":"ec565fe6ae7af607ef974c0deebdc6661f2eabff","sha256":"102390ad6f3b2b56938f594bdc29b00de6d15b92cdd3b2c0ff58f02259199e2d","sha512":"e64d9862683b507af503eb99e6ec8a7a08f2096d54d8ea4c301e601eda5576fe53884542ec353bd1a713b903051ea52647096dd6824467a64cb42da96a785add","ssdeep":"24576:1YMRhiqh9397PgfdHWwafrLZ3vC1VcgKDyz9Y:1/Rhiqh9N7PgfdHWwafrLZ3vC1VcgKD/","tlshash":"2a057c84b181b5bca77b0bd1647f9029b23e2f64f91ec480f2bc48353a69485b567f9c","size":830130,"data":"","first_seen":"2026-08-03T05:12:55.463228Z","last_seen":"2026-08-03T13:33:00.299831Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/en-DFr_HPRH.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bd319863a48276055ac564463ce5c67e","sha1":"fa5d5ef31e69defa39f704043ddedfe8d980d856","sha256":"dc3c364d9b3156427c9b28ceb4b3f98a3c88491795509d72a94d9e91e62edf20","sha512":"d01499ac10f2945f352b5dff1746e8a485c4bc3c96372ca0b588d21ee095bc799accb4a22813e4da44765eae8f4b1a88839c95ac7f82983cf756e70d6ccb4a81","ssdeep":"1536:686zYaevzxZ3DWCxz2LEDwzR6EsH3DPfaU1BypzxpxSu4V6:2oLTWCYLEDYsHzPt1BAxDSuc6","tlshash":"d0933b0a4b142bf90ae3135539ca3ad9767c4a1592a2c455ccdd822c13eb99ed13fff8","size":93910,"data":"","first_seen":"2026-08-03T05:12:55.533805Z","last_seen":"2026-08-03T13:33:00.281612Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/SupportChatMarkdown-DPXA8oi1.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"003e7f2531c075fb12639e472802d9fc","sha1":"bc41017b6997a3c84bd9eb776d71854c308fa35c","sha256":"d37e22c05daba235faec2632edfd6487d0eef21241fe5ccc11172b6859f67cdf","sha512":"e1275d0df5567aae56e2c9e387cfa77b76fa54dc351ff6d3da7a2707bb07293b0e18e219f37c089096bd6ad06b17ca12c80410e834c715cd67fafaffa1718f74","ssdeep":"1536:lxIrfScQbINCSvyZ2BeGrBkDB/KT02RBXgDO4mSvvDGzsTr:lxcS3bIIvjGdkDBK02svhr","tlshash":"c1c3d69c788278a5639a44e590ff500bf27d6d4b700c84b0f128adaf79738695263fed","size":121382,"data":"","first_seen":"2026-08-03T05:12:55.536122Z","last_seen":"2026-08-03T13:33:00.361341Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"🌐 i18next is made possible by our own product, Locize — consider powering your project with managed localization (AI, CDN, integrations): https://locize.com 💙","filename":"https://grandmoney.top/assets/vendor-i18n-DUl_EuQy.js","line_number":1,"column_number":33445}]},"http":[{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/pwa-config?domain=grandmoney.top\u0026platform=web","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.348Z","timestamp":1785733991348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/public/pwa-config?domain=grandmoney.top\u0026platform=web HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\netag: W/\"62-jIniE1qGtkwZxc6p3KDdgJWY1ts\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hpv3eEHTaB4pwL0Fj%2Ffdby6eo87nZS29vaol%2BCRzJpmvTUNwxp%2F03wsae199kPlsaPGEaaqK2N296RRgYbIrb2zJKoqz6kuvGyzvAhB4DqIGh6MO2eggMNDd1U9q2A%2BI328%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a252d4e60cd456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98,"size_decoded":1455,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"30335302470ddc7b0e774d1d88b9fb12","sha1":"8c89e2135a86b64c19c5cea9dca0dd809598d6db","sha256":"4199e5189bfafe7a12018f9a1404a6e39f8c40513f6385935d91fa2760f72964","sha512":"e47d8212ecaf38357792c10df0ab78e45f42d0b500aa4007970822a7c1c4f1258c385e71f13f82ccaa77e7388a38987351e35b9f52f073effe370bb14c2ebdc3","ssdeep":"","tlshash":"09b012629b130d6607750442b88028001fdc02d31ef6b649008cd5f86ac39a0d017e3d","first_seen":"2026-05-03T09:25:58.474517Z","last_seen":"2026-08-05T11:43:49.443188Z","times_seen":34,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/domain-info?domain=grandmoney.top","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.350Z","timestamp":1785733991350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/public/domain-info?domain=grandmoney.top HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\netag: W/\"1d6-yYbHTpfTaw2QH66Ow/bYO7cmofw\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OeEO%2BeqxJikTZEjne%2Ba9Gw1JX0a7dNKQ%2BMyZah3rHDSm7HSae5ZXSloejPu2w%2FzsRFpWOO08d2aazGRQGCUuPduYCybxriSc%2F5%2BQzXXCGBr1zOf070HTFPYxiIhcgFGBg5M%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a252d4e60cd356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470,"size_decoded":1655,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ddc02a064916db68a45a5b193d789971","sha1":"c986c74e97d36b0d901fae8ec3f6d83bb726a1fc","sha256":"6602883acc341a359a3779fa430f67dfe41fec4f7e3cc6b56877493e5871714b","sha512":"fd5fe6af2568dac94b5802b702abbf6e762e41f18b6c437501299b6063cdbee3a83ecb01b3c09b59c911aad91deedfbd1ef3a440711d4f13ccaf5d3c6185cb01","ssdeep":"","tlshash":"6af05c45be24ec7c1b513f9178e63d4952bc06279c656ca2c6cd4f3843e99321226552","first_seen":"2026-08-03T05:12:55.543565Z","last_seen":"2026-08-03T05:13:46.900303Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/fonts/proxima-nova-900-italic.woff2","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.352Z","timestamp":1785733991352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /fonts/proxima-nova-900-italic.woff2 HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/assets/index-7Xhm8Vm9.css\r\nCookie: __ddg8_=PMjZe2qFdjYnSky8; __ddg10_=1785733991; __ddg9_=162.158.222.25; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=fZv3xQtNES1JeNeb; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg10_=1785733991; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg9_=162.158.222.65; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\nlast-modified: Sat, 01 Aug 2026 21:01:46 GMT\r\netag: W/\"6a6e5eba-c4a8\"\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FEjf7dwUClseL19t%2FXNsjDCBR%2FOBlebnddfzcaZIVaTwDANDK%2FnC5VFlrgdCTlOqSNWZN51ti1Rkd7KoaaLKzp6GZyE7xcqVs76MqmcBcl%2FyWS5Nw7Jyh0O%2FBAq6UvE5qQ%3D%3D\"}]}\r\nage: 59\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\ncf-ray: a252d4e5f9d92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50344,"size_decoded":51379,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 50344, version 2.197","md5":"f4fc4456db374952bd5312eb09ef6eda","sha1":"47021971306ee29fb2e4fe84a40ddddf9518ebe9","sha256":"68ee3ef2f68828efc7582711c69682365bb4f5d5402a46497989a8f6ac055383","sha512":"81ed40a24b1f9120ee5e615049ea376eda8fb4a64d822ccf26dba83ac00d64e1794c26dcfa4329888586e3a4a9a22a81dec5282eb5750cca7f2b85a5b95fa731","ssdeep":"1536:j+K855ACjEl2cH6AG3QiZUX5nSNES2via:j+K85N4DHtiCXiXe","tlshash":"b333f1509f9e7cf3cbc21651aa0bc7d00ccd80bc5994e2c52bca58a70b1a9ac655f78b","first_seen":"2026-07-22T11:06:27.373852Z","last_seen":"2026-08-15T05:46:47.476095Z","times_seen":23,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.361Z","timestamp":1785733991361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:26:36 GMT","end":"Sat, 03 Oct 2026 15:26:35 GMT"},"fingerprint":{"sha1":"C6:89:9C:7F:59:81:87:BB:1B:D8:C8:FE:CF:81:CD:0D:A4:E4:D7:DB","sha256":"48:E2:DA:EA:3D:13:BC:5A:36:A2:07:52:61:24:2E:FB:51:32:16:AD:7A:57:1D:93:D7:96:51:0C:D4:12:39:FA"}}},"request":{"raw":"OPTIONS /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\nReferer: https://grandmoney.top/\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=XXLctxrh51oLvJwo; Domain=.gambl.bet; Path=/; Expires=Mon, 03-Aug-2026 05:33:14 GMT\n__ddg10_=1785733994; Domain=.gambl.bet; Path=/; Expires=Mon, 03-Aug-2026 05:33:14 GMT\n__ddg9_=172.64.209.56; Domain=.gambl.bet; Path=/; Expires=Mon, 03-Aug-2026 05:33:14 GMT\n__ddg1_=en4HOCZqiPVdZGe8wtER; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Tue, 03-Aug-2027 05:13:14 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\naccess-control-allow-methods: GET,HEAD,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 604800\r\ndate: Mon, 03 Aug 2026 05:13:14 GMT\r\nvary: Origin, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2BvwwHP6Y7Ocpajd6cbo7gwRkma6gVkQU%2FNEtjD0XNDf%2BPSJRNny%2BFElUZgsh7xn39yZahrNiIxerxeGShStbl%2FD6c%2FW5GkqMM%2F1F4xGoi%2Ft%2BvOvznCyhgw%2BKD37RC%2BfHKwA\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a252d4f9686a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1236,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T12:31:28.718761Z","times_seen":17918613,"resource_available":true,"data":null}},"time_used":3188,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":77,"receive":0,"ssl":3110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/win-cash-CHofxrqH.webp","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.493Z","timestamp":1785733991493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /assets/win-cash-CHofxrqH.webp HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/\r\nCookie: __ddg8_=GjImBa5K0EYe838r; __ddg10_=1785733991; __ddg9_=172.64.209.54; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=8bI6xOL6ewMl8wNL; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg10_=1785733991; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg9_=162.158.222.19; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\netag: \"6a6e5ecc-f84c\"\r\nlast-modified: Sat, 01 Aug 2026 21:02:04 GMT\r\nage: 20639\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yzp09Md%2BZDoL%2Bw299f%2BuAOoZWQcgiUz5YJnlNazTrBt3UbXEZ3ht3tkiPquz%2B%2BMyED7gxhCGMhNxiS9witQ0D268VGpAZoMACYN6tUKrXa8CpRsXr5Is8%2Fz3e1BU%2F2C4zA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4e6d9e62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63564\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63564,"size_decoded":64675,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae60319d41f63eae7109c16305553d3b","sha1":"ebdadc59c48453e46d9a9130df9ab82fdae1d0c2","sha256":"94f291a905db8a05f837866d504aeca0e34d8ed42c390f74bd79c4a2d04ecb65","sha512":"4fa704b949384c795690fec18e2a042588b387cd4876c0c62af0981eb0242a651841dcf87fdc88b9474020022bf616fd7e6fcd8cfdb302203fa46b42af05ecc0","ssdeep":"1536:ush81eOGsNlT+F55lwOEK7C/lgjKHK0zLIuBX5krTEXq:usO1eaHOwOEK7CdgID7BX5eD","tlshash":"3853d038c1dfd1a8f179057f4cacf411668e4c1df2abb33900e1626f284d295af79699","first_seen":"2026-07-22T11:06:27.439661Z","last_seen":"2026-08-15T05:46:47.469374Z","times_seen":23,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-two-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.046Z","timestamp":1785733992046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-two-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"1e8d7-19e1889e150\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouAx3ftHmt2ISsJqnluyartD57SNGGWdi6klanaOIOvrdQe88%2FodwFX5ofvMT0PXgQahQ85m71%2BIXMy4DJTCuDSy4mFfOZ5PHgvMip4UJ82Z0WnNieke91%2Fr4Dg83s2jTs8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea4cf156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125143,"size_decoded":126569,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"2d07f21bc75cb17f3940a7123055df18","sha1":"c3fd481de5f7cc6fc3a4bfbce86e2bbdba460c80","sha256":"9ffc0c533072f341ae2d4e275de1a7a5bf86aa9ff2ae655d29a762af22dc6889","sha512":"28f58e9df9b691e95c7020e505dd5625a186f3841a5ded08138178f438c6cbde536e97c10faeff65caacc8a9e56e1d2794e20664bdeca81e12c2d6e98f4b5817","ssdeep":"3072:jbk1ZeasmvqGo36qLo19b9fxS81h2n1Yg:U1Zea5fdWo71xDzS1N","tlshash":"33c31253a6202d8bc25b83fe551b055cbf7d8de00d29baf78e5ffd618a38ca1e944409","first_seen":"2026-05-03T09:25:58.448805Z","last_seen":"2026-08-15T05:56:23.259595Z","times_seen":77,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/index-7Xhm8Vm9.css","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:10.840Z","timestamp":1785733990840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /assets/index-7Xhm8Vm9.css HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/\r\nCookie: __ddg8_=SH42UziUlQuok3eE; __ddg10_=1785733990; __ddg9_=172.64.209.50; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=ioFRGu3ZaQcPoDSU; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg10_=1785733990; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg9_=172.64.209.28; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/css\r\ndate: Mon, 03 Aug 2026 05:13:10 GMT\r\netag: W/\"6a6e5ecc-3a116\"\r\nlast-modified: Sat, 01 Aug 2026 21:02:04 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 20640\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nF6T2g%2FXdI8T8Kh6irh2cvKaamPFdsCkk%2FKFMRbGavRQgzgXx7aBszjZd2KO0AEnnXL%2FcjrYf4Gi9DrFeKW5BRPwczhSRp8LRCXTqiAJiT6PQa0bG2aXuYKs28V42mm%2BuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a252d4e2b98a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32978\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237846,"size_decoded":34131,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b5cc1454487ae28c3d290be4701d3122","sha1":"2ac5aa95cd2e0d62a33ca0af841e82b2c9d4180e","sha256":"4c4948b10f8013ac09433e66beea9653127e6c9ae8e5aaf356079bdbb0ff1164","sha512":"95cb7e81a889a3c86c6def42aa6740a1c543a527e1e5d6aa53babf67b91bbe00d543db31af3128eb256c8a545bf779a6fd301dc5c4a6e442cd1aa21455b5346d","ssdeep":"6144:5+4Tx+LVXo3Y1m8tc0hQTmacWnbD5ZprZBnCz+R66YcKhzBOmZEAmfH0PJk8pL2E:kVR","tlshash":"9b3493a0b239e53fbc3770f9d39ce88c610ab086de265be9bd11602227c77f55c66614","first_seen":"2026-08-03T05:12:55.441441Z","last_seen":"2026-08-03T13:33:00.333388Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fruitswx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.066Z","timestamp":1785733992066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20fruitswx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"54ba-19e87ec55b3\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:13 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqMRkV3KZQUaCL4lopVfEtFeJJiMIa5CmPgPxk%2Bb%2F4J6WftNtbiVHmDlcFtc4G1eB3nMsub7ciGSOuzXJf9rHwYBUKBejlFy5ZFrd34ohOj1V27iKxGzG5tZzb8H%2FO8Ke9w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea6cf656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21690\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21690,"size_decoded":23114,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"607b78c15a6cb099ed5685a069eec4ff","sha1":"f2222fcbbeaa10682090cb1fc0606363dbe31d8b","sha256":"c29893458d23db118fa0bf71b74e5a3ccaa48c3374776c8767be4c521b998ae4","sha512":"794fa2d28461ec95badd7a15e54e24d06c6b29529840fac24217765229f4b46bdfc24ee0b1d5b7fc9502e851ddb0a62e8905da94f922158c58335160f0b71c27","ssdeep":"384:pN9jHe138IK4vu0zR/U/nWxkr9UyTqh2taocYjlOxvDyvaI1Wuaz1hoLiNsTymxR:pDHscv0zR8Pk0K2ta7Dylk0+0x4C/","tlshash":"eda2e03f367c89877cc47f265275d9820004b082dc275a61366776e63fac5eb23ace82","first_seen":"2026-07-10T22:57:09.653891Z","last_seen":"2026-08-15T05:56:23.292981Z","times_seen":49,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/coinflip-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.087Z","timestamp":1785733992087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/coinflip-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"d612-19fb30bbfa0\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12izxVf%2Bbql8qwOikLZ5j%2Bzhg3asqEexjcvvpEwc%2By0WLcXrSC6NFOUnnCJe5qU1ngGpy37Pk7kdAhV4DCNlK4o96zADD07H5kMjTwWt%2F7wRTKWGNeVn8aaXeywo4vmkrpM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea8cfe56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54802\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54802,"size_decoded":56228,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fdbaeb3d555252953c048005ac6cf5d5","sha1":"a9dd99896d13d9b7805fb3ac9ed0e1aa8a111f86","sha256":"0dc5eca5813800dc327b56e8be0492ff4773e7dba6ea23f286b91eb8c869e175","sha512":"93edb192566b733bae2060e15deee775c39a3eb106a95ebbadc056f0af909013275d9884c33f18437c5fc43bf768db636d323d34557a35a69ab6b434d858419a","ssdeep":"768:sTayCE2ehaNnd4N5T9MPF5IcpL3EGD3w2tUn/LDYyorbkCI7Ifi7HvyIr1VAmGUn:pyLraNd4xMNt3EFGrg3HfRV3P2gH","tlshash":"063301ef43b922a9ed18b57afc00154235d8b5e29f8d9e12d17085e091cd1a9abc286b","first_seen":"2026-08-03T05:12:55.550879Z","last_seen":"2026-08-15T05:46:47.472586Z","times_seen":22,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/vendor-query-blYatFq0.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:10.839Z","timestamp":1785733990839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /assets/vendor-query-blYatFq0.js HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/\r\nCookie: __ddg8_=SH42UziUlQuok3eE; __ddg10_=1785733990; __ddg9_=172.64.209.50; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=ZJTENT0ZkUuV5mil; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg10_=1785733990; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg9_=162.158.222.69; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript\r\ndate: Mon, 03 Aug 2026 05:13:10 GMT\r\netag: W/\"6a6e5ecc-9f54\"\r\nlast-modified: Sat, 01 Aug 2026 21:02:04 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 20640\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h0fcAp9nHgorp%2Fq2CSh4qMKRlfMijuPF2e76%2FhywsNGioPNLNpkujrkZ1EZnwXxjPR5diCphNPSSvVMSmNJOc6lKcKf0tNg4%2BKV59uDP4NIxznksbsI9uPhubVPDq4v%2Faw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a252d4e2b9872efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11988\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40788,"size_decoded":13155,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40787)","md5":"8da59bb21606c81c0cc962cffa9ec93b","sha1":"7635929f1e02268a0ada4dc7c0e5cd6ae48ebf4d","sha256":"5ae41fb91a4951f18905da8132cebab395f8ab7c30234274ec3a6730023a7f5a","sha512":"d32530c81f224a3855143e7aab78ced1bdd32c9cd61a3f0d9bd9061ddd5bde234e2a1f9d91835d98d615fe8509afe294398b9782230b6aa37359b6761152740b","ssdeep":"768:8frxg3hup4aM9hvUmU2yIpof9XP6Iv6GBk6Dr4WIsCYo2BUiEkFREQpiO2Lf+18w:OGU2MFoOE48X8t9Sy8k","tlshash":"d303b8d67142e2273ae18191dc3e4125e2356904340ac06cb6bcade7b963ccff5bea35","first_seen":"2026-08-03T05:12:55.530654Z","last_seen":"2026-08-15T05:46:47.462103Z","times_seen":22,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/wheels/status","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.643Z","timestamp":1785733991643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/wheels/status HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\netag: W/\"d8e-uhHEiq4v7S7ngHVN12s6mdbondY\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FbHwYjKgJ66JTe5%2BGONOyxXF9kIR1tGcKKKs87IwrSnzA69jRAmXCfy0cdsnqwNH2u8ylKsAtwhaW7IEMtJ%2FrW%2FFiWPIEY4RCvvXrpNV4NAGI4JyKKEze3Ke7y1MmYMD3c%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a252d4e7ccdf56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3470,"size_decoded":1974,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ee8c3a1b08187697c5a73b90653536a","sha1":"ba11c48aae2fed2ee780754dd76b3a99d6e89dd6","sha256":"c9625cfbde64622167cdb5ea305148eb201251faf096b0bee3aba413fd8ee73b","sha512":"80d20bd3b3ec63781c7d34b1735236d42d1e51b54fa9fda920022298eedd7c85cce3b80a718ab5f6968533184218e1e1ad11505217af19c192b73d15423b4b80","ssdeep":"","tlshash":"3961e3123d9d8e72c1003a8dfac3823c24d9920a11c0cee7d5ed8e7566d839e6e35e36","first_seen":"2026-08-03T05:12:55.560399Z","last_seen":"2026-08-15T05:46:47.469921Z","times_seen":22,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.043Z","timestamp":1785733992043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"13ea2-19e1889de90\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36047\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcJan03ZWvN6%2BcYgLTETnSbPMnjy4e4CDbV67GmWXs2eyni1kCUFKUGqeGbTaUQ9XuKIIgFqHsDnPAy92dHXxGVd8OhCQz1v805egy7nE9YUNMt1huLZw6UdRFW36cM6oCk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea4cef56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81570,"size_decoded":82991,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"bd31dc34709ab28154febf333c9d7b61","sha1":"957e8b303a3a7eac3058fbb67cc82c673569388c","sha256":"c4a2ab24afece8e542c58e54a15c9b5ba387d224aec670a881d89cfc49f63f8d","sha512":"e77dc104b82d541bfbc1dd6a5195a6a9f7bc24e32e4acb2764a0118427fba1bee9b07b4716d3f4228fff4205b447c79ca0e9ac5af12d18e6eac868af1ec8b9d5","ssdeep":"1536:XtLff+jHHoz3d9eMxKlXfg7N2OT0RyDxbH+pMEaJUIitksm:Xt0nUd9KXfg7NrmytgMhitkL","tlshash":"c28302daff75e12428a5d3a7a117770c421c9ef6e2bf2ee12c1a517a50efd84b812314","first_seen":"2026-05-03T09:25:58.558516Z","last_seen":"2026-08-15T05:56:23.262044Z","times_seen":73,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-03T05:13:10.532Z","timestamp":1785733990532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 03 Aug 2026 05:13:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nset-cookie: __ddg8_=SH42UziUlQuok3eE; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg10_=1785733990; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg9_=172.64.209.50; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg1_=5iWIbJwuSBgA9HXP6WPN; Domain=.grandmoney.top; HttpOnly; Path=/; Expires=Tue, 03-Aug-2027 05:13:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache\r\nlast-modified: Sat, 01 Aug 2026 21:02:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xjwh%2FIIqmY9qbTwysXpitJL%2BjJD3p7Y3dfiAXAWR7HsjcotL3HLgvyTWuBtKfWZjhqg0DjNOcWlI7ZT%2BAiwh3Rv3BJfG71hZ%2FQuUre6z414Va6SEURQrxH3ra1nx%2BSiT1Q%3D%3D\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a252d4e0eb6d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3826,"size_decoded":2404,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8a9e3e0664938383805068e5bcc19f13","sha1":"a5120cf57a40371237ad3fe8c0e10ef1e6e21478","sha256":"a3ca2cd3e88ab4b51957513428250ad6d639c03ccb96e67b3c3d1753fbc22c27","sha512":"b469ace5f2ea865d006ba04398408e745656208bf8ce8dec81bc7f63f0381e6c89ec574324397d59450e919e5818f06beef9305f101b6f57d40cd264df3a748f","ssdeep":"","tlshash":"04817601b6b0b8a0027253386bd7b448ee64d643120dada4f98e91de1fc0795c7f3b72","first_seen":"2026-08-03T05:12:55.541149Z","last_seen":"2026-08-03T13:33:00.318016Z","times_seen":4,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":73,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/vendor-react-DhQyWnmE.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:10.836Z","timestamp":1785733990836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /assets/vendor-react-DhQyWnmE.js HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/\r\nCookie: __ddg8_=SH42UziUlQuok3eE; __ddg10_=1785733990; __ddg9_=172.64.209.50; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=fLMpeCvnAgxykX6H; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg10_=1785733990; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg9_=172.64.209.60; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript\r\ndate: Mon, 03 Aug 2026 05:13:10 GMT\r\netag: W/\"6a6e5ecc-4596a\"\r\nlast-modified: Sat, 01 Aug 2026 21:02:04 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 20640\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3bJht7dE6HOTmraMJTAsR0mTiia23wynBvCaLOHJ6nwx4kiYDOn42EU%2BEvq%2B%2FPjjC5t4U4DyKEL4qSVRAZxKdP4DayHHyRNp7RFSkNvzqU3xdjreTItKPGZrPbi52fKfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a252d4e2b9852efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 88181\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285034,"size_decoded":89346,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42921)","md5":"6b83c56000176b609171ae4571277914","sha1":"627849bf3457219fee7bac71205a985c4fc35698","sha256":"6aafecc18ea6033067f708a61c2a9674857ba9c9689d683832caf7764f61cf86","sha512":"9d38f9043b86a9c68b665975dd1e2bec2e25946cbc49c3602527b7a0d37a2fd9e300e33edccf20a8e0148a984a940d53aa82322a15c84d2ea2fa398e29352426","ssdeep":"3072:zuHaZ6Qx6nlBYORKSYZOP7JWOlaqEGJONNMBRawLFi0W67ZinO57Nx6aaEqEy:zuH86Ft5jEqON23g0RVZLA","tlshash":"95543cf831aeb5265fb352b540af010772782c37184d8860b154eeae36b584961bbffd","first_seen":"2026-08-03T05:12:55.435886Z","last_seen":"2026-08-15T05:46:47.465872Z","times_seen":22,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-vegas-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.035Z","timestamp":1785733992035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-vegas-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"1d4ff-19e1889e1c4\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25Ao8p8t7kp8p4cw4faJBIkZJOe8BxTwrvgy474vjwtnEe5WlambafoM1kwDvCy9fYgJ5KPHiAYAbb0uPh%2BG%2FtwjSPmsYvoFo9rrPHWqkR%2FlrAhHFPJSMsn9hi7XLusXz0Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea3cec56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 120063\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120063,"size_decoded":121489,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"d97c882f1efb1cb1a0602a1409eae227","sha1":"fed1caf3f89fb7c82227e37bd3159eeca20d05d8","sha256":"5a11d7cc3d0dcb1cdc5b76a698c907e6c85bee99c68ec743af24df813e67fa29","sha512":"c5cdd38a27bdf7e64929d9dc9092c4fe80b96a1bdd38f865aa1e9db9c207a34e2daf50c46aea9ada68011e8264e5da1a3ff18bc7573f1249e3b1cc0789d32080","ssdeep":"1536:w4cNnWnyYHZDR+gQngdgg768GBAqx4v6QI0ZbVZY4EamRVW63QTnwHe6mp3ZyNlO:oEJHZDR+gasY8ZYNaD6WwHHNo1","tlshash":"e8c312e970881bf8d381ea1ffa06ec26027a87c97fd32cb882486cbc4554e5dfc55161","first_seen":"2026-05-03T09:25:58.487822Z","last_seen":"2026-08-15T05:56:23.322646Z","times_seen":77,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/tower-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.079Z","timestamp":1785733992079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/tower-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"d026-19fb30bc5a0\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SV3rcM57U3oNQzgpG%2FFDSQ1ItPTOkAzKlfjpxeVHJT5woqFdv8aF0tS9Kb2pUFWJPgcreW00KrcvDDKHzsfPymEThKFsLEj1cW7ZUFa7TCmt8V7gv6460d9ysXmGuA%2FoeOI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea7cfc56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53286,"size_decoded":54708,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b9599e2d9027e6ab05bbfeccb087252","sha1":"01c880f214208347ffafbef11a4e9f0dadd09197","sha256":"f18abaa4b4fd38b64c53aee48caf8195a6d9f39dad982b48d17301a710374894","sha512":"4e895bcdac61c4b06189fba323c4298b02e16029c369402da731516cfcb60336fe9efe032f7e80138f1cdaee0be22d1bc5a4abd0e85317ee4b48cbb5d7f4e75a","ssdeep":"768:2T2ScHf0aT+HBx2sLkijIoCogKWIrNCw5L9RdmDWSrEvOA61aJ4sg4jJeAolCJub:Rv+mOu+gKTswRLdmwaang49ehCJH52wE","tlshash":"7533f1025128fb2ff494f030f4c0521bf175ae98f25b566b63b7612a805c96827b579f","first_seen":"2026-08-03T05:12:55.485514Z","last_seen":"2026-08-15T05:46:47.488677Z","times_seen":22,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/fonts/proxima-nova-800.woff2","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:10.834Z","timestamp":1785733990834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /fonts/proxima-nova-800.woff2 HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=SH42UziUlQuok3eE; __ddg10_=1785733990; __ddg9_=172.64.209.50; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=jruP28Y6PKYPdL9Z; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg10_=1785733990; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg9_=172.64.209.20; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Mon, 03 Aug 2026 05:13:10 GMT\r\nlast-modified: Sat, 01 Aug 2026 21:01:46 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: \"6a6e5eba-ddfc\"\r\nage: 59\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7qIq9pRDusiXGAiftMD6f1AFG1KhmgGM%2B2PX%2FKunNRy0Y7vGLyxc%2BwfTRaL3e1dW4dAfCn2qOEeUb46OBFqGJxrz%2FEchgo2e2JvlJpNiJdE44csljgG921hf6RqUBujNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a252d4e2b9822efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55527\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56828,"size_decoded":56626,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 56828, version 2.197","md5":"b62234d570a2f321f0b3eb0e8f407576","sha1":"2ae6b0e3c263dbc04cb474bd962f3db4e286af94","sha256":"04500fba7e032d439d12511f6886776baab412b61e55ef94d3a3641db66e3940","sha512":"1c5aac8ea95a4d961778ff6ae5efefb6b7b0ca6a468687b82ee0b18180896475f8a3bcb6dbd69c908af87a229b8f37d179448e4c98c473d8fdcd52d99fd66432","ssdeep":"1536:PsmprCcNwOBEGu99oT1saR61dlbGQIMc8H2LAsairOTfDm:ffxCcT1wleMcSfsHr6fDm","tlshash":"a943e19d480fe940dd913139553a36c9c1508cb5971f9de92afab0ba9b7fbc21f20e06","first_seen":"2026-07-22T11:06:27.425097Z","last_seen":"2026-08-15T05:46:47.463602Z","times_seen":23,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.753Z","timestamp":1785733991753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:26:36 GMT","end":"Sat, 03 Oct 2026 15:26:35 GMT"},"fingerprint":{"sha1":"C6:89:9C:7F:59:81:87:BB:1B:D8:C8:FE:CF:81:CD:0D:A4:E4:D7:DB","sha256":"48:E2:DA:EA:3D:13:BC:5A:36:A2:07:52:61:24:2E:FB:51:32:16:AD:7A:57:1D:93:D7:96:51:0C:D4:12:39:FA"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: 3ad6ac77-f30c-4a99-95ca-7c2a88051ecb\r\nopenpanel-sdk-name: web\r\nopenpanel-sdk-version: 1.4.1\r\nReferer: https://grandmoney.top/\r\nContent-Length: 778\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":778,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"app_boot\",\"properties\":{\"__referrer\":\"\",\"domain\":\"grandmoney.top\",\"app\":\"client-new\",\"app_version\":\"unknown\",\"build_time\":\"2026-08-01T21:01:37.844Z\",\"is_pwa\":false,\"viewport_bucket\":\"lg\",\"dpr\":1,\"tz\":\"UTC\",\"sw_controlled\":true,\"route\":\"/\",\"lang\":\"en-US\",\"logged_in\":false,\"cashier_variant\":\"compact\",\"ttfb_ms\":74,\"dns_ms\":3,\"tcp_ms\":12,\"tls_ms\":10,\"html_ms\":0,\"dom_interactive_ms\":297,\"dom_content_loaded_ms\":655,\"load_ms\":1212,\"fcp_ms\":647,\"app_shell_ms\":987,\"entry_js_ms\":140,\"entry_js_kb\":811,\"entry_js_cached\":false,\"entry_js_protocol\":\"h3\",\"css_ms\":92,\"fonts_ms\":295,\"resources_count\":18,\"transfer_total_kb\":684,\"transfer_same_origin_kb\":683,\"cached_ratio\":0,\"nav_type\":\"navigate\",\"landing_route\":\"/\",\"__path\":\"https://grandmoney.top/\"}}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=FoqnUuuigr6c0YiH; Domain=.gambl.bet; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg10_=1785733991; Domain=.gambl.bet; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg9_=172.64.209.56; Domain=.gambl.bet; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg1_=iXFsbbR4fiSgPLokuZN0; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Tue, 03-Aug-2027 05:13:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjIaM46z9lIsuHWclK9wkZj56I00Zil8rZ8vg9FMzzglOmg4jUkw08vagfnUO5WsYd63VdfLoEKMyV85tZOQjRCzhAfESvKZOIlIC8Yu2e9OvO4tTjgb7zcw8HNb2gzBJIbz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a252d4e8ef4e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":1189,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9efecd4f265122eba2e5b8c88cecf868","sha1":"5c01017de953dc8b89d31e0475d34760f01d6882","sha256":"340f8c361d0ed4d149dee494fecbbc7cf63e1941f74a25d471fffd6162cbde89","sha512":"bde8c39fc0bbfc51066818299ec9d14430398c84c4c5f7ba79035cfff5d79a4f4154a0c508c8f66136971965681a474baaeaf1908b911f75994920f4a0e0caca","ssdeep":"","tlshash":"89a02447c75cdc5f0170d1144510c105c517d01173c44d4100df14140150c4f43c4d31","first_seen":"2026-08-03T05:12:55.52569Z","last_seen":"2026-08-03T05:13:46.921392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20olympx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.060Z","timestamp":1785733992060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20olympx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"7606-19e87ec8ba7\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:26 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36047\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFXF154LQzK3BJ6O5Ajn7KQVgxRQu3TNliJzQmhz1Iuvnza%2BxXE2DQgvHANAIjITC1i%2BxYn%2FUD1IY1dLB7eORojI5sDNZwmvv3CmAEHaSg0j19GxThCNi5%2FwW2Qr3Br9F3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea5cf456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30214,"size_decoded":31640,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9514f4cf62ac519e1be2aa9c0c76aa36","sha1":"6e303bdd882e0a4b82139db82429a5282f6e303c","sha256":"d3ff28472bdabcf09e6429242c9320e819e993cbe0119c667e11a834235ae783","sha512":"65afd430152c1f5e3aa462ffff635e36653111d1d61b0c22d5675dd7eaab99583ad3392a2b7ad63daae10f448ede601aabb7603e041c61fd1c2e459fedc4627b","ssdeep":"768:PYAFoDRfzqaU0msv6kboS2FA+2DMAsKR5FucxI0c/liV:DFq+aYsSQoSH+2D5qcaj/","tlshash":"47d2f1c1a9326d244f05ee992bab0939d8c03e25b5452ccde23bcec6735d6f6837125e","first_seen":"2026-07-10T22:57:05.857918Z","last_seen":"2026-08-15T05:46:47.839859Z","times_seen":47,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/en-DFr_HPRH.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.353Z","timestamp":1785733991353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /assets/en-DFr_HPRH.js HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/assets/index-DlcATcnA.js\r\nCookie: __ddg8_=PMjZe2qFdjYnSky8; __ddg10_=1785733991; __ddg9_=162.158.222.25; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=GjImBa5K0EYe838r; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg10_=1785733991; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg9_=172.64.209.54; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\netag: W/\"6a6e5ecc-16ed8\"\r\nlast-modified: Sat, 01 Aug 2026 21:02:04 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 20639\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FuhTdxqBqHYBjJOhatgRL8JYnKctfEGPRxi0%2BuWoMdbwACfnot1wry%2BnNC%2BX1QNXgsr5lNL%2BxzZLzsviNgVlMMmpU24VoHYlV9d3tLpfF0SOd3CbVUkY%2BfinogOiKE5zjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a252d4e5f9da2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31254\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93912,"size_decoded":32425,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (21468)","md5":"bd319863a48276055ac564463ce5c67e","sha1":"fa5d5ef31e69defa39f704043ddedfe8d980d856","sha256":"dc3c364d9b3156427c9b28ceb4b3f98a3c88491795509d72a94d9e91e62edf20","sha512":"d01499ac10f2945f352b5dff1746e8a485c4bc3c96372ca0b588d21ee095bc799accb4a22813e4da44765eae8f4b1a88839c95ac7f82983cf756e70d6ccb4a81","ssdeep":"1536:686zYaevzxZ3DWCxz2LEDwzR6EsH3DPfaU1BypzxpxSu4V6:2oLTWCYLEDYsHzPt1BAxDSuc6","tlshash":"d0933b0a4b142bf90ae3135539ca3ad9767c4a1592a2c455ccdd822c13eb99ed13fff8","first_seen":"2026-08-03T05:12:55.533805Z","last_seen":"2026-08-03T13:33:00.281612Z","times_seen":4,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/big-wins?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.646Z","timestamp":1785733991646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/big-wins?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\netag: W/\"ae1-KRzSxElAEiy38n+Eg8vKGQXUJTs\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kK397u%2FMBry1Pg6fCIPb%2B8wqH1F1EJro2Ubx%2BNqthoQucUqAZkcxO8HqGs9YLGn24dY%2F%2BRcQ2FUjtQ2h5h2WBicgMGwBl0VYKab6LW%2FvcTbgg3ZNH7xT%2FuXBJyNeZidKi%2F0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a252d4e7cce156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2785,"size_decoded":2364,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4c9ccd5b13d768b9f706c0faba21e37a","sha1":"291cd2c44940122cb7f27f8483cbca1905d4253b","sha256":"1a8a663bf76dd6a1124d0e5a0dcb1b86cc6f07ef1bdc15cbfd4d35febf64c18f","sha512":"0e3aa44ee65c4a920d169784dc6064dba2ce3aa1adfd14c2d21bffac5dcd063b3c334bec83f9a2a23d2b6903af029f9648e55ff2dfe85088f522de8f42977b4f","ssdeep":"","tlshash":"2c510f7f90442cbcdb755be0858a749de8eda2ab85d00808819a5d37ccf45e639bc623","first_seen":"2026-08-03T05:13:46.924941Z","last_seen":"2026-08-03T05:13:46.924941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:31.993Z","timestamp":1785734011993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:32 GMT\r\netag: W/\"a67-92HDhBoaF/olKdqMb64XvqBGZLk\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6EuYTHDxjXbwbwZaQY04MEBNDO5yA0KYJUwMi96qWgywt6SLIaCMAoj2j1cJxa%2FfURKTLaOeYAq4F36EJ0eTO1dXGb3oFDtC8tpcO5h2ji3Ag4lv3ZeYTz3LymMQYkYwNPE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a252d566f82956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2663,"size_decoded":2264,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3a5a5f1a393e10c2e21611a3717e6eab","sha1":"f761c3841a1a17fa2529da8c6fae17bea04664b9","sha256":"6e9b8776d2a3d8aac9da68569013ff4ecfc690356f6defe6168930c485be6b37","sha512":"7ff0462fd5a0c849300cfc5406b08a18c5ca5daf35631cd3241c07b362114bbacb57f1b546fcbcc4b9ab808ae7cf39e45ee2bf521bb9717cb0abba716bfef908","ssdeep":"","tlshash":"9c51eebf96842dbcda310a90c549745fe8eda2bb85d00c08d19e4d36cde02a639bc967","first_seen":"2026-08-03T05:13:46.926996Z","last_seen":"2026-08-03T05:13:46.926996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.756Z","timestamp":1785733991756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:26:36 GMT","end":"Sat, 03 Oct 2026 15:26:35 GMT"},"fingerprint":{"sha1":"C6:89:9C:7F:59:81:87:BB:1B:D8:C8:FE:CF:81:CD:0D:A4:E4:D7:DB","sha256":"48:E2:DA:EA:3D:13:BC:5A:36:A2:07:52:61:24:2E:FB:51:32:16:AD:7A:57:1D:93:D7:96:51:0C:D4:12:39:FA"}}},"request":{"raw":"OPTIONS /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\nReferer: https://grandmoney.top/\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=kt1ILAgQGWBbs6Iw; Domain=.gambl.bet; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg10_=1785733991; Domain=.gambl.bet; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg9_=172.64.209.56; Domain=.gambl.bet; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg1_=SOYBCFBDqkeNY8vVBpdv; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Tue, 03-Aug-2027 05:13:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\naccess-control-allow-methods: GET,HEAD,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 604800\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\nvary: Origin, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNxSfqAvFX1hxKJrs8YXdj%2BmmS0f1s3NgwIux%2FUuyIFosCrXleC4VCWMGuJoGpElqMKxK5P%2Fehek9BA%2BBSqUr%2F%2F1YyyzG3fCjEb%2BFFeDh56xjYOEoNj7mGDkkPvcpS%2Fgxlrd\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a252d4e88f465ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T12:31:28.718761Z","times_seen":17918613,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20starlightx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.064Z","timestamp":1785733992064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20starlightx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"89b2-19e87eca9ab\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2gr0a0KMDRx4bSd5Dpf7wOTMkP7ZWCw5vu2Y7PnPVUS4KfRYUgHyDrYN2iJm1rWHSVcIpv6%2FwNY%2FOiro4pmy8pfQAMAMR8k5449jHPFX7%2BwqVYJlAof8vNCwNLy5MGDFN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea6cf556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35250,"size_decoded":36674,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3ae3ec5a75801b381094718d06dcab2e","sha1":"7eb10ebde706bbcab68295ee9fb2af204c97886b","sha256":"3cdaf2affbb77d8a1e05ecd3bf913ab2029f2067674709c4564fdb7fb2e25aa6","sha512":"f61ee24ee3d37c2fdc9d4ad7e5e6fbc1125475dbb11ec79f4ea977fd95a80ac407c720096081e2cc3defdd8819c41a35a2eadc2b5d326b9d4b65a9ab4b00639c","ssdeep":"768:nEnkhDG+JBWk2KiU3xY08SwZhfNqhz6uMkncw3ucL655YSG:nEnkhfWk2KiUBY08LZlNqhaktL25YSG","tlshash":"3ef2f15b3746bcd6a6cfb94b28bc5b0a7e1e1811d5f12f56c148c6aa2d3f47c3a63012","first_seen":"2026-07-10T22:56:48.050838Z","last_seen":"2026-08-15T05:46:47.479429Z","times_seen":46,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/cricket-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.037Z","timestamp":1785733992037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/cricket-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"28376-19e188a0797\"\r\nlast-modified: Mon, 11 May 2026 19:35:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4jA9IA5bGn0kyGUIgmgEzuVkcV1hhG%2BLtjpBoviV4azhSRq16aO9iPKQLMJI3h2INeEG7cKgab6PQ1G%2FbWudO4a%2Fg4FCaPn9sEEp%2FbWXj5%2B%2BYn1U5CIMzuDJtx%2BE98Q0hI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea3ced56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 164726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164726,"size_decoded":166160,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"1e1ba05a859bbbc01900d9ba08880e35","sha1":"7e9c385589952ab26f8f04deb098622c4310acb2","sha256":"aa6523b76b4bd7c120c494515236995d2583f085d9b9e73d96482b8d55064822","sha512":"394bf0f7f744e63a365f3c5e046e448924c15774bc15f4b435f27a3c4d3326a4a8cb6be51926504ef11006f0238802623e1c40b39a0c91b612cfc657bbec9914","ssdeep":"3072:yHEh/mHTKsEg0Y12Wuo0DNXO3m6IMgNiMSBTJWvRiH8wJzudjsuyoB0VFvqBZ0AJ:ykaTKsppSDN1mgc7Mp/kudjf2yfd","tlshash":"5af3129f461a6f92e6026c204b86cb7d63e4c4314c597d6738a8687c341afd2897b7f8","first_seen":"2026-05-03T09:25:58.532508Z","last_seen":"2026-08-15T05:56:23.330409Z","times_seen":79,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-new-year-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.029Z","timestamp":1785733992029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-new-year-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"1730e-19e1889dfa0\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eu%2FUpj7Dmewl%2BIAcFjR5NnyeBmdHiI0c1AH21h2glyYfzpL6bM6NbrUu4rk7%2BP0XdQ%2FPCnzz02KAeWJ3A6qRCuxlefCOepeC4TGDcfuelTShWUBtG%2BnWiRCGN6bEKRjlZ2o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea2ce956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 94990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94990,"size_decoded":96419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a63fdbefceb85fa12b3fbe163536ba21","sha1":"1aa6d1ce85bed8959bce57748684be24725ddfd5","sha256":"372724c2ec10fcfc1068d6b19eb189f5f55a977ea9d7c559342e40282cf1d71e","sha512":"3a710b036de4629febd15903a03c98ca13002a4368cfa5246f7bd983b6269acfe02f20408d6eca115b29027ee60175dad8d0f78ced875fbeebaccb1addd5d528","ssdeep":"1536:VdFXCx/pEG1NBLws9R9tuQcpEkCTnWZf1Qs3D+y6yRCPXB9jCbNmDOmTCSedWViU:dXGqGNLws9P4QcpdCLWZNh3DP6bB9jg4","tlshash":"95931255ef9d5db1ef56df39a494213ffaf3247a8f980149904ca9d0a0018ef304d6ba","first_seen":"2026-07-08T18:54:53.805092Z","last_seen":"2026-08-15T05:56:23.259099Z","times_seen":74,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/mainpage","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.644Z","timestamp":1785733991644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/mainpage HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\netag: W/\"100f1-FZ7ke1EL6kQeuG8n/KRk+13QuCU\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VfYZpWzC%2ByRYvQ7rs90%2FWrPZRBGmpxFOVfthhxHpZGSTRtD3Fyrlx5GXOD3a7ZTCRi7nT0s65AroAWariQbQ1TSyc3zQCX9k%2F4CXoIcdNhyv0SZt0Pj0FVBMetwYEywT2x0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a252d4e7cce056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65777,"size_decoded":6143,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf97b474a439f69a693b7208ffdd3a5e","sha1":"159ee47b510bea441eb86f27fca464fb5dd0b825","sha256":"3aeab587e17baff12d8b820964b8b6df113a6eea5dc674d837c2f9a11b257792","sha512":"987bff237d91e972a0b86e995f3b4b5e3ef6549f0853ef44fc0d4418a6d8149dbb49ff46466acd9fb732d159bfeaee035000507bdc8a1fb7549477638fadd6a9","ssdeep":"768:rSMaKAT25vbjV8Fsz+BP7FWwx+vGJBuEgP8VoQBlCmqWtRFUhNxxHwV0BA9RnIPB:NvvN3vBCLqNP","tlshash":"0353037e4ba87c34e63152abc10e71d3b4c9f13fd8c1891cf3784925c9d99aa1a9e41e","first_seen":"2026-08-03T05:13:46.931973Z","last_seen":"2026-08-03T05:13:46.931973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.646Z","timestamp":1785733991646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\netag: W/\"ab8-LhlC9SjZYNJ0eTc7ourKpeo1eJw\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FcZeqRzStUoZ8W2G3lPYZ48vv0QjKEImYQasTIwgWuKsJXGYyUZygiX6oq3KiD4YTc8T8%2B%2FK33hGZ0Xv2NYjA3%2FT1mQENydhOzlHxAuyESG5JZFDsefHdTtaC0DnNg7Qew%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a252d4e7cce256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2744,"size_decoded":2249,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8117b566e44a7801a154672ede9f2805","sha1":"2e1942f528d960d27479373ba2eacaa5ea35789c","sha256":"d31233ee6e5c12252a866035f97e93035ca8bd9f2b28757fe21ef9525f17861a","sha512":"3dcb089a48e68e25737becd8b203f43227a99fa468b3626a4f4b60cc85c24237c3e33573950d83add7db23f571b1e157e7b97c042a17cce5461579a65535de5b","ssdeep":"","tlshash":"2351fd6f99442cbceb7909d08489346de9ddf1bf99d04808d09a8d3ecdf11e629bc923","first_seen":"2026-08-03T05:13:46.934195Z","last_seen":"2026-08-03T05:13:46.934195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20wwgcluster.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.071Z","timestamp":1785733992071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20wwgcluster.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"64b4-19e87ecca23\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:42 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gCHY59NGp2VHFo3b7JT5qI5Dgo1W13413f5exhFZNjZpZuRHhQoEkgjWVs%2FxOUu9fErfezPrEAU4cZcivzR%2F4r03ifRx4fIquYDN5%2BTBvodULh6HCNhapJC0kJxxKmH4Zk0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea6cf956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25780,"size_decoded":27204,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"466585300847fa0e13987ef5dca6b7a9","sha1":"90fca47f54ecf010dd26cb69ce2865921c028dce","sha256":"9ff5266fea78992d2da49b274dcaad4c97241690a59d0d532e1b3c28090fc815","sha512":"ff9d83dda4da71c8b00c3bf981285093a45f7f48740845a72719f038a072e340284e0750e2662395cb2f1525d423cd5072a388a734139f7e56b62aaa10ea2a81","ssdeep":"768:6Krbogtb1sc931tNEV5/iP7cTPTGfdYjj9g/HhsgoayC:6yMgt5/fyqPvfQj9DEy","tlshash":"03c2e1630732b2b96d7aa69cf89e2bdb115f6011b38d107750a2387dc016eb734242f2","first_seen":"2026-07-10T22:56:48.045744Z","last_seen":"2026-08-15T05:56:23.294455Z","times_seen":60,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/plinko-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.072Z","timestamp":1785733992072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/plinko-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"c198-19fb30bc4a4\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXyinfvVC9Jrluz0BIARJHb7qDTreFmQXhzsozPz4mHlrxFpTemj3NH8%2F0qQ8QPPgr5TTWYgsQ5XiWI7gyxVE6wbWZem7Ifb1JCxWinSEb2u9pbVb%2Bke9UjKvvgfBZNzZX8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea6cfa56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49560\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49560,"size_decoded":50982,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb44900e7ba7846fd99ddb711205d3f7","sha1":"34d327bcbf62771763a5638e0ce2e514c51a7f86","sha256":"945a5a2123b127568550250d0eccec85732139d5b8369d10cf2786fe681f0aae","sha512":"db68043d0e5bcf920da4af12ae599ea3162d84d96d009971e63e4d0fb555e259f9deb77571a0bc033f45374ced86c739dccbbababcbbb8ece2e86a44a6758985","ssdeep":"1536:JoErMPIb1FT+pjEyzi8AtbIyUllp4Spys:lqIb/N8AtbIyKlpJN","tlshash":"e123f1bd7bc5e27ccc0a1bbb32d51e8d86309c08dd25ae421765e050efa92506e5ee4b","first_seen":"2026-08-03T05:12:55.460818Z","last_seen":"2026-08-15T05:46:47.483145Z","times_seen":22,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mahjong-ways.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.106Z","timestamp":1785733992106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/mahjong-ways.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"286ee-19e9f372430\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:11 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rS9YhnyYb4Nulj999wr2T8Qyj%2F50aRNY7o5sz5%2FHwKt2CCYrYtCNtj1HBSHTxwnf1uE6BLcleTAUY4hxE6b%2B2WF6JnPb4EQtNPbi0Fk1li8q%2Fjcz21NNIMC5ArfxM0f%2Bq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4eaad0556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 165614\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":165614,"size_decoded":167044,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"95d68880948c873c58ea66e23474ec69","sha1":"6631b75dc45db3bcf97429f32a1ad56bc107293f","sha256":"7205c06940e908eda5afde23f70c4e6fdd86c1a2cfb6fc3630af5a1471c4fd87","sha512":"62090b6c01be59590f4c5c87c95229dc16dfdbd58255da020214914ccd661c07e97490a4d9556a6fb7439db81e22e66623bab1041f87cb69dd09198aebe92624","ssdeep":"3072:bJ8tGOuljN80yHozDPYzZHgpzv0sWptTY5twl2prCveK118JQtRyvunMU:F8ghljmo/wJOF2RiwleILymMU","tlshash":"d0f323c1f4f81af8f653986680cdaa4b5e66a9b62d1bd111bc429b2c1ec0867e3743d1","first_seen":"2026-07-10T22:58:17.931148Z","last_seen":"2026-08-15T05:48:10.027015Z","times_seen":24,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/favicon.svg","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:11.488Z","timestamp":1785733991488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/\r\nCookie: __ddg8_=GjImBa5K0EYe838r; __ddg10_=1785733991; __ddg9_=172.64.209.54; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=ABp9HlosRxAzStb3; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg10_=1785733991; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\n__ddg9_=162.158.222.91; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ndate: Mon, 03 Aug 2026 05:13:11 GMT\r\nlast-modified: Sat, 01 Aug 2026 21:02:04 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: \"6a6e5ecc-6b2\"\r\nage: 59\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkiMMxfORUBHIO3Fbtw7ltcx18dBG%2BlaN%2Fihi5eqkTq6yhA9eKPNXbDNnpGFzxL%2FUu%2Fr3Hv%2F8DkPXFoo5rSp6389h8RUxS%2Ba6JLP02se3ldYKcILxSfjk3eTzh1dgOYpkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a252d4e719e72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 842\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1714,"size_decoded":1944,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c939c1002550233de2345e6a1deea5d9","sha1":"76c96e16e58c808c19bcff3329efcb06ec3bc54c","sha256":"512b47d1440b1ae2ee599b6f50907ca97cc784d51751d10d0e0ccd1f7f477bd9","sha512":"109ccfa8aed17d69d695ca5461f3e10df97d22c941030d16ca09b54f39dd8a6ca502f80da48cdf8436415f9febfadc5736f2f382e0e814eedf142c711ccb9fb1","ssdeep":"","tlshash":"ef3194b0e195b423f700e3fcc924f8e5229b1aaf6491c958b3c02d0aa49859e290f993","first_seen":"2026-07-22T11:06:27.428016Z","last_seen":"2026-08-15T05:46:47.472059Z","times_seen":23,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fparty2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.091Z","timestamp":1785733992091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20fparty2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"5de2-19e87ec4fab\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:11 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emkbiwQjX4cMbX0zq0d%2B6CMsduM%2BCLaEXyQYqgD%2FUlSVPvITNEEu1E8RYt0gbLqHe9b%2F19UYcTt6bvjkDk7HbG%2FBpWMg5PUviYiGJQYGx0DBJWJMSQUfDW%2F9vDhmx0bz0Hk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea8d0156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24034,"size_decoded":25464,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7161f3dee408d108342e9e493f909cb5","sha1":"4b222932bfc1c35565091316edd289960b13b60d","sha256":"15238cc480c000b408607fcbfd0d3cc978ca6ed13f08a450f75f3b6de8a5eb02","sha512":"24930bfdc8ae5dab65139966a3b51428bba54ddcce47d52c9aadfcb41409030c0f9a8b1510a493fda7768cd4b56bf611c9f3a1e774cf96b14228739d142f3ca1","ssdeep":"384:yUTyQuU+GCFhCtevu528zIqnolnMB0LhogwGx4OPd1+/HrkKKsTOOpzCEj:yUTyQOjC+u+qnolxd6OPT+/HrnTOOdnj","tlshash":"16b2e1d0a815d71e990222cca66c1ee7ee6ba58b7bc00331cf3890e6dd18857a759cb5","first_seen":"2026-07-10T22:56:48.070404Z","last_seen":"2026-08-15T05:56:23.296566Z","times_seen":56,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs10txbigbass.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.095Z","timestamp":1785733992095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs10txbigbass.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"9fe8-19e87ec0197\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:51 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uL0fnZyhIrEdBWNEdz%2Fl7a75BetJfWIouuzHrdXGxU4ZjRgXo7hajetsPhO7sk4xxBTQHRAFkC172SqmDVphrHTYyi1JltAligyr9Q4wEMcR%2FTCK14qbIfDS2DoRMCEkjJ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea9d0256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40936,"size_decoded":42358,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"46e5c64ee5f47133847efa0e29e91a95","sha1":"4a3f73b71e5e95c4b69f593027effa6285305190","sha256":"10c32076a837fc6ea356eb4d8fbb695e132ddd4a2b458b318e371a953b4c7701","sha512":"61f1fa630014cfb5032ae6a86ce1310a86f018e29368bcbbe0e460f5aeb621548364ddfd2cf74cd4eddd52b253ff85280381664f94d09ad0d54f31b0271282b0","ssdeep":"768:N/GALN5fNwrRiz067G5lYdKToKFMYAHb05jyDz+CWKGFcf0KejN:gALYiz067GvFdAAjyDz+C2B","tlshash":"e503f116339aae31d35b33f2ade05bd57b1a8590ead1a34c1cb30f7019bc48b29b4761","first_seen":"2026-07-10T22:56:48.098937Z","last_seen":"2026-08-15T05:56:23.32411Z","times_seen":65,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/fonts/proxima-nova-700.woff2","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:10.833Z","timestamp":1785733990833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /fonts/proxima-nova-700.woff2 HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=SH42UziUlQuok3eE; __ddg10_=1785733990; __ddg9_=172.64.209.50; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=GPF4OKNloJYYZb7E; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg10_=1785733990; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg9_=162.158.222.21; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Mon, 03 Aug 2026 05:13:10 GMT\r\nlast-modified: Sat, 01 Aug 2026 21:01:46 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: \"6a6e5eba-c4d8\"\r\nage: 59\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BlUy8K85GzaPGo3%2BoES2fpusNdi22Xb2dHvbtBXZWSgKXW3jqnob3BZRVQgU42nfukk2KpapedYx1347ju3Mb6bBAjcAkGhK6fdDbFv7PnQM2A%2FraTuvjcgXgSV5yNU8tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a252d4e2b9812efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50465\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50392,"size_decoded":51563,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 50392, version 2.197","md5":"54652f2743682973efaa1232ad5191b8","sha1":"ef7fb431a59f7c6bd4b434cc317ac927afb281e0","sha256":"f9c871b76de94c298c951f897381b6ca535bba70efc108a60953eb3aa4d729df","sha512":"cc4abfaac3419c9d218deadfb74c83d3abd1d81e6a0b30c6bf05df4526a905cb18fd7cd5a00292d63a46489664b10d933f6f949dbcfc9e8055d3eac0e58e5721","ssdeep":"768:NEw+/PImIfmmHM8N6tTltBbQBha73TpQp4anJviPMcpx8bTmnvC1oaHRdFRW:NCHImIemHWlnbQzg32BJEXLyAvhajW","tlshash":"b733f155327b51182cefe5f3b34ae058ee565fb5736a2e038c4b0ec020a662602f55fe","first_seen":"2026-07-22T11:06:27.388003Z","last_seen":"2026-08-15T05:46:47.474318Z","times_seen":23,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/index-DlcATcnA.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:10.835Z","timestamp":1785733990835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /assets/index-DlcATcnA.js HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/\r\nCookie: __ddg8_=SH42UziUlQuok3eE; __ddg10_=1785733990; __ddg9_=172.64.209.50; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=iIN5XcrUDts1nzmW; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg10_=1785733990; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg9_=162.158.222.231; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript\r\ndate: Mon, 03 Aug 2026 05:13:10 GMT\r\netag: W/\"6a6e5ecc-caab2\"\r\nlast-modified: Sat, 01 Aug 2026 21:02:04 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 56744\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUhY0G%2FsmRBEcyI7Zjrrqb8nfhx8XVtloH0BDWIdN5fF%2F9SvnJXr9Ogt%2FO4v9IhrHsGPZq7VPYvPhSINHzCfJoMiUTgS6FOFu7OhybblzGy21wy1qjNM%2FbI1q8nnz7roog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a252d4e2b9842efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 238542\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":830130,"size_decoded":239712,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45685)","md5":"804d61830ff3aa9695f1a9e4aaf6ff66","sha1":"ec565fe6ae7af607ef974c0deebdc6661f2eabff","sha256":"102390ad6f3b2b56938f594bdc29b00de6d15b92cdd3b2c0ff58f02259199e2d","sha512":"e64d9862683b507af503eb99e6ec8a7a08f2096d54d8ea4c301e601eda5576fe53884542ec353bd1a713b903051ea52647096dd6824467a64cb42da96a785add","ssdeep":"24576:1YMRhiqh9397PgfdHWwafrLZ3vC1VcgKDyz9Y:1/Rhiqh9N7PgfdHWwafrLZ3vC1VcgKD/","tlshash":"2a057c84b181b5bca77b0bd1647f9029b23e2f64f91ec480f2bc48353a69485b567f9c","first_seen":"2026-08-03T05:12:55.463228Z","last_seen":"2026-08-03T13:33:00.299831Z","times_seen":4,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/aviator-mini-spribe.png","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.031Z","timestamp":1785733992031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/aviator-mini-spribe.png HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/png\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"f837-19fa9266394\"\r\nlast-modified: Tue, 28 Jul 2026 14:34:53 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36047\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZ06rpk%2FytJb6B1l%2FzUD7KCD3J9guzgWuBmHgZmBUFr%2B%2F03almR2IEdR4eKadEg5pNMfZEbTv%2Fh5hJq5HU6bWvmvMaYa7oDZojmE%2FU%2BvUXd0Q5QuOujdYUXCihPRBBIBSJM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea2cea56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63543\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63543,"size_decoded":64974,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"1c52b5f3e659f44a930d15becb7f39c9","sha1":"9e28417a76240110757c73b6faf3ac5ce1bedeac","sha256":"9d16af214603d98995216e1c5fd4f75fa7dda5a61a7be83babe7c8b8871e420e","sha512":"c2a648fd43d03cfb15a20bb5602b5e64ff5178cb0b498e4751ee09f87c98fd2cb9a32b120462e7daf3d411058a9cc3b341b0d3b497c5cde40f9d4a190493a100","ssdeep":"1536:d3k0b7RKpki5PUOzdtZS8YtQ9lFMZ6xQEDf4:lZ9Kai5nzdtZS/mMZ2QEU","tlshash":"955302fbfbb3abde1188524a4b312c25f59e12ca9d6f1497b98420c1e8605156de733c","first_seen":"2026-05-03T09:25:58.463676Z","last_seen":"2026-08-15T05:56:23.275896Z","times_seen":54,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-race-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.038Z","timestamp":1785733992038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-race-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"2fb27-19e1889e02c\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36047\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2B3cXK48KfVoRmDWgwOLkWMkqTEB1MPKbMXvwjxB%2F0mdKgeuZpoj0JhzZfejgDveT44KzesbenBIoG1R7hXmacTp7M6eJOgaHIW1DEX%2BuLsKxhi7YBMvQgE38K5%2FQBMd3Rc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea3cee56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 195367\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195367,"size_decoded":196795,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"de158b0c510417fba2d86fe9dc29d4cd","sha1":"b023587e15eaa94cac426b0a634e83b3fad3d972","sha256":"dfe048fce2f1b58c4cd56008d522b8ee3b1f0b40b6383d846441621c8d89df6f","sha512":"b035fa249696ca1923e54314cb2a96197d5878f1e11a1cd33a57ddad4694f4d92f3d70f71b21a1749a3c835b3109e5791b6b7269304aec9f12c55d5e6c01c0f0","ssdeep":"3072:NJJRhYFLeQitU00sUQecSwR3+SFYGypmMSXJ/EOYF2/0/+RsEvjO8/e9xLX5kQO0:NzRYiQ8UiUmR3ZFYJpmMSZsOjuUa8/8d","tlshash":"611422119983348d566c0beeed88d0fa00fc654e53e954b059bc9acbd6ac3f117c2e6e","first_seen":"2026-05-03T09:25:58.528271Z","last_seen":"2026-08-15T05:56:23.328245Z","times_seen":75,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/rabbit-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.052Z","timestamp":1785733992052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/rabbit-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"266bb-19e188cb63e\"\r\nlast-modified: Mon, 11 May 2026 19:38:55 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36047\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rBPoEeHVpvCLG38Vp3p2Z4CRt1JVP2vZfW8mVcKGLepaTdbk%2FN%2BnFWIxt3vNFgWddH5AwMItDPDDr4TI%2FdDK2DFEe8V%2F3qaW8qWwOmq6TjcQlq%2FEEin%2BBynImjz8Wl4Wcg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea5cf256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157371\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157371,"size_decoded":158803,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"350386f4ae53bc8b1e470dbc414eb3a6","sha1":"d1d4472c746f237c379d64794389971df62dbeb9","sha256":"974fa37657af78ae7f1695c622ad77f544cc19dd6c3bb29502ba7e6f4b5c48c1","sha512":"7ee319101357aa4bbe8e6c0eda5ca456d062d8fe15a6298e01066491c36ba25b534266b8ec19f2ba1dfbcc657df1b0c849ca65c57767743ff21269550e04144f","ssdeep":"3072:n3qGl6Cx84WbG3geXr6LfjDcjjeZa0V89C/gblDXNOVR7E:n35lkYDXQrYjC9AxblQ+","tlshash":"6ef312530d7981eb4b9bf6e3b9040aa01c026b4d37d183bbe79deec869d58bd08c5305","first_seen":"2026-05-03T09:25:58.450756Z","last_seen":"2026-08-15T05:56:23.327717Z","times_seen":77,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/crash-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.088Z","timestamp":1785733992088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/crash-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"f52e-19fb30bc0b0\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2eYKIJEciEy83i1VcszzExB2k0a62DW7WUCtStTN0%2FAkjGskf1BcSKyw2H36Xc4MwmGtNj%2FguHgrSmDw3s8ZRsCM2OvDXYo0XrqPbsZwA8ByItpnk12qzoQ%2FhX1ENHVlV5o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea8cff56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62766\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62766,"size_decoded":64190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3e9dc79e30339acd6fe5a784b66ecf4","sha1":"85959fc05c9e530e5a99db417357929624c01aa6","sha256":"db0dc98e77734eade49137af6aa78048bce08bdbaf48ad06bcd054ded5fdb94c","sha512":"bc37983ad7d5cc31482132f758d38b4a19ae2caaf1d8b578967c53cbbd0eaa85bbe9c1b9b517806360a0457df8a2c632c0a500dc04dd3e31ee2f69ed5d7d0b06","ssdeep":"1536:DpGvlHDF4TR9mRcJgHqmZ3HjX5l/RGzasqDFejYsTL:DpGb419mRcJCtjJZTDFejYsT","tlshash":"e153025070e726abfe0294b014709a3feedd792c74b59cb511839bfa11ac0cd97ca4c9","first_seen":"2026-08-03T05:12:55.553159Z","last_seen":"2026-08-15T05:46:47.491002Z","times_seen":22,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20sugarrush.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.055Z","timestamp":1785733992055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20sugarrush.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"74da-19e87ecb05f\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0k97Rd7nTcJKRoYRX9uUjcuKNtGJZLSa9vR6dVlXSBmTtU2nTazUJirqx54ULtVqhAJM4xa43q%2FI6kn4o3N1Fbkh6q50189nUCGFQBzTvpz%2FVVIVAFXu8eK%2BxTyR%2BAaTok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea5cf356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29914\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29914,"size_decoded":31340,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5d34e92022a20b828fc43e0f5325f88","sha1":"84d7c51ff977d6dc7cdd6ccadb5524c617720840","sha256":"05f2eefbc3a7a73ef1cc83b31710ddd700b1e3f3ff4a23134de10b7b06d12a3e","sha512":"2c9637ef738349f0817dbb21371d276b68a06ece886665218e45d004fabb277af7e9b742c146cded525cd5443c243ac727041f08a0b1e5cd1552405f6323acb2","ssdeep":"768:bfrq1WWjyHPGdsVtCOsirTXlW5T7YujH5JazIUo8iVA:bzqUXHPGdsPCBOTV6TVaMR8R","tlshash":"6bd2e1b7010bb490789250d8e1129e9dc1f31bb5562757389cf889a318f6c727d26fec","first_seen":"2026-07-10T22:56:48.118862Z","last_seen":"2026-08-15T05:56:23.260097Z","times_seen":59,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20starlight.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.068Z","timestamp":1785733992068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20starlight.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"8a02-19e87eca807\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lcs%2BVi8Hdd5b%2BeTEC4MIBjSgC8b7RKn10hOIFacG%2FAb%2FjLclN9DzTz9vIJI4SPhwTUfjghd%2F0LKKGHvzrliPanNI3B61VNtBKEFDWBFFO0hk9kJGeI1jPIYz8ifJIb1weuQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea6cf756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35330\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35330,"size_decoded":36758,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fb70ba24f84087137f07fd3cf86867e2","sha1":"6386b0c6ba2cb19855f820832bd93519e0681bd0","sha256":"779f8d03af2585cdd3584a77c86785ffbe20b691ee740d604aa92bf33abc2c89","sha512":"22cf4a6685a034663d99dc36632d8b1013cebcaa19ea5f6cfa3ff3a3b4851bf3ef6bea86a8768af559b15fcf6456cb630f39258d5042639ccd814affd0d6d0f0","ssdeep":"768:YW2SZkHXcFP2HKuzbO3poGubgpsP08oOFSGIw2rMO/7F/fceme:LZiXcFeJY1u8AoNGIw21DF/f7","tlshash":"51f2f1d48b4ca3d1ac94212e5e1f943232cbd78646ae4e90412b63907f2cb67673b9c7","first_seen":"2026-07-10T22:56:48.046937Z","last_seen":"2026-08-15T05:56:23.323624Z","times_seen":61,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/dice-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.085Z","timestamp":1785733992085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/dice-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"e878-19fb30bc1b0\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgqZlOKAhfUCtQFlUoWRF3A%2FS1ACyWRWQ66%2BrXe2yQ8geXoa9vIJTh2at4e1FgCEVSzC5yUFhtHl1v9gtFmPwDLjkeu5Oj67Oymfev7IrfjzhjBzant2mEavNyrqwAKyQCk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea8cfd56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59512,"size_decoded":60934,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fff2e15969b5c850409a612cbed1485d","sha1":"e9f5120ccda1f4b7de0b3035b8a952ce12e5ed70","sha256":"b3dd3eebc50039d87993470811865e8923791a5089ca1e3515aa347123b69390","sha512":"198e9f1dcac65b9d5a1e9f967a19ebb6c8d5c6e7409cde4b9fbbb92bd24629c67d48c50e3a3ac88c364534900572fc9fa3bfa94bf0f5b7cb0b013988faa72455","ssdeep":"1536:TrIRyDZBU7ahgw6IeyKWhcyelz307PCCydp:TrIcDZSoLuMcyeREzCCY","tlshash":"7443021723374ff1d69ff0b03b22694fdbe8e2562364c2412ac95ad532c978c4e2ac91","first_seen":"2026-08-03T05:12:55.538796Z","last_seen":"2026-08-15T05:46:47.487672Z","times_seen":22,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/limbo-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.089Z","timestamp":1785733992089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/limbo-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"da8e-19fb30bc2b0\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BTJlsMnauxou2jiESotkKgng82zI4knwVEvR333X2%2Bg%2BpcKmD%2B2jPzGECkrNUeagLRR%2BBpfYm75X5rS4hIVOwkfVz0R8GEOo6k6DSLw4lOuIWaQhFuhC8Zq86vtIZcuQjo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea8d0056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55950\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55950,"size_decoded":57378,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"755a57f21433f5bf1a1b7145f1a2a5eb","sha1":"8c87413306efbc9419f957dd1c817ee7ddc33d9f","sha256":"96984de1dda99e6efd61393948fe3fedcee4f942294b52c9b5b3dc08d211c5fb","sha512":"e6760f51471651cf252c3f9c565c87cf8e85508b57a40ed2e78b600f3aa26840f5c4fc9a6358aa21cc6d8bbaf8cdb70894e1d8d40dca07ecefe97f6cea58905e","ssdeep":"1536:bXK1HSSrMgWqvmjrICtMBHAd79Abas8QY:OhSq5XME2cHAOasQ","tlshash":"284302f307e531cafd249336aee1134973b2ad48d7644785c1ac43e18a802eb677a9f0","first_seen":"2026-08-03T05:12:55.507803Z","last_seen":"2026-08-15T05:46:47.470465Z","times_seen":22,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs25quadwolf.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.096Z","timestamp":1785733992096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs25quadwolf.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"4d70-19e87ecee77\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:52 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADR82Y2KOCS1tu9nk5t%2FsWkX2Nh%2FFHuSAzQ825bEpdjZe0i2FQ2utC2CbHF2zWKNSNUvVree70Zd0GYJWVLjzirp9ota9yB3Fxs%2FDY9GHvk4HDOJ%2Bla%2Fg5GKFtioOsNIyKQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea9d0356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19824\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19824,"size_decoded":21252,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38f7ebd46ae436e4193c583431c4ff9c","sha1":"87c37085ba466a6f7493bea45695beb8dd541c30","sha256":"e5fe1440b484a1c976fef0b20f6ec978295b9bc5b75eeb023af64c50d06ba5dc","sha512":"c5f52c4f4acae5ef57236c66d9172f9e100557bdad80da597958655f8552d02d9e752aaa64fbfbb8e98b61f92be978d44c7ec5a8b7b1dcf69a14541c34036d16","ssdeep":"384:IZotUWFNSh39+m+GWFi9Q4LqpaAg0ZXUGK/yN+sVRW57nXy2F+3q+V8ixtkwWO:IZoNNShN+mXPQ4GxfUl2+sVRWlnXy2FE","tlshash":"b892e11cac2a91d0591afdefec7e1cf46cb9875f8e65874d907c800c6ac70e6560a973","first_seen":"2026-07-10T22:56:48.071457Z","last_seen":"2026-08-15T05:56:23.295017Z","times_seen":28,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/fonts/proxima-nova-400.woff2","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:10.831Z","timestamp":1785733990831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /fonts/proxima-nova-400.woff2 HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=SH42UziUlQuok3eE; __ddg10_=1785733990; __ddg9_=172.64.209.50; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=d8ypGLTRvahyjush; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg10_=1785733990; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg9_=162.158.222.24; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Mon, 03 Aug 2026 05:13:10 GMT\r\nlast-modified: Sat, 01 Aug 2026 21:01:46 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: \"6a6e5eba-c3e0\"\r\nage: 59\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yE3rUBVPBRwjVLbBLfJ3Rjr9gcuo6s%2F0SNRRy8bgoviUWnKXDx3W6fqoF7qvkluW2XZb05OqhEf5CntNhrNk5eaJgMUkXApMwCUJrgzFYh0dyWdAoCljNSlh1v5no7KcoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a252d4e2a9802efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49926\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50144,"size_decoded":51020,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50144, version 2.197","md5":"83a692d665bcefcfd06fa29069a70492","sha1":"c993dbd1deaca0176325051dadc14e19091227aa","sha256":"3f16e37be1b41b426978a1eaa6dd9d30050ab36ec5a0a56d56e5156b55ca911e","sha512":"c786e7d1a4e0652d49224a0852d0ec2234b3bc7aa97451c9d3ad45b97f14cc5d60ea3acd92048ca0daa1a54a631286cac305bf9b002af68b2c04069173dddbdb","ssdeep":"768:XG4XuxwpUzmAEzqXkxbPMDUGMVCvyIPUc8ogdIsvK5RmzKFd+Wmk6:24Xn1A5URkKCBZtgdIwK5RmeFdok6","tlshash":"d833f121f0f8de0be801267cb005a7f393fa85790af42f5d2786b15b6c5f6261be4506","first_seen":"2026-07-22T11:06:27.405995Z","last_seen":"2026-08-15T05:46:47.468823Z","times_seen":23,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-gold-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.034Z","timestamp":1785733992034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-gold-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"2bb1e-19e1889de1c\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUAIqhk5Pr4iRHC7Um3SaFcXpCih1rs3fbaYmxZOyL6Q2LkZrplZ%2FDiGBovwJ7eIHdB2L9z6%2FUCayJMjyX%2B5bftO2aUWxbPvsAPgIlbVXMxzV60b8H%2FtZd6BTYqdI1fxWk4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea3ceb56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 178974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178974,"size_decoded":180402,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"7e6786b8f04722cfa883924cf56e618a","sha1":"11834b65154c89318b09e30540170438279db363","sha256":"d15c8109068462a9bf3994fb4ef6f126253b038b1ed7e2030c23f013dc7a8857","sha512":"0e188cc4eb6bad0ec7a3eb8e6bcadbd2ad447ffc868ec327abe99924d910c8c1b38bf5607442880655d691967bb27c87abbca0ee85fd7ff4180942a96958a690","ssdeep":"3072:wbRMbtR2+Z8ik03JdOr2QjubVpGy1lYxba5gzDdmTrCgqZnC1Wtkbzi6eI3uMkRg:QiR2+Z82Cr/jubVk0I+gvjbCMtka6eIF","tlshash":"1304138e2c596af29f843e48c8d05f3e4a7245e7df80b1d60e0bbcf71e9018867b5556","first_seen":"2026-05-03T09:25:58.480792Z","last_seen":"2026-08-15T05:56:23.292391Z","times_seen":75,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20olympgate.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.069Z","timestamp":1785733992069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20olympgate.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"6cae-19e87ec872f\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:25 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36047\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p74cphbiz8T3MtnX1oG2FfIVoiauZGlH6kmMpbmASjaxI%2BKTug2InTeMq6sJ7IeBiMewFtka1wyEiGPvaeYLBnc7zhXlS%2BsMz9Bc3MsCSJ4pbsmOrOfUMZX%2F%2B4Jmqsghb6A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea6cf856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27822,"size_decoded":29248,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67a9f14667062ed7354e711966e13f6f","sha1":"df69b5e3720f0d72981cea8b6b242ae18a9087c8","sha256":"8fc1a0ae668b1bcfadd45af5b0c9184a82c16e186ee88db6b014cd58e893950c","sha512":"5740b95c0ddab506d7eecaf3d558766255036bbe35f15623dd226d1a6fc71e97c0103b8045436c8c50266a0ea7251f7ed92dbe9da176fdee6cda78ffd6ab5066","ssdeep":"768:rSI0kwqIQwzv8jgHqYBpvaphCvCV5wDH3bF:J/wZHTVvCVWDXb","tlshash":"fdc2e131f92236dacb45f3f584d1c7c0123f1191589e2316ae9921b5e2f87ea7c5239e","first_seen":"2026-07-10T22:56:48.1Z","last_seen":"2026-08-15T05:56:23.330932Z","times_seen":60,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mines-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.073Z","timestamp":1785733992073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/mines-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"cb6a-19fb30bc3a8\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxdkhHv792bHu3GVFIrm9CT%2F1RKx6ngT7ZSA3jAiU2olz1mu0z%2FPJQXT3L%2BEt0tE0fwp1uGJoeBhuh5%2BBFNt2bQQNxTkP5qhwyT2eYuNagXw7wlhdiM3Thsp%2B9I55wu79fA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a252d4ea7cfb56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52074,"size_decoded":53502,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e6dd7c5d9beb5bf6c03482540c5fd84","sha1":"dab2e778a18045a007d7fd1bfcea317c2cdc2996","sha256":"557723694980cfc077065df089e3e1353ae359d284052fef12785ca9769e9dd4","sha512":"76181aa202b53d72e2dbebf89970442ee3daa78c116f0e7c247a826fe7257dd875f58e69148cea7def4b84f67933e262cfe63a36a7858abd728bb033ea26ff64","ssdeep":"768:7Tei0rT4SJCfjAyXGrQk7U3xjWBZM/ZS7CkkzkD1G1yr+v3NX43hCV4lAouCsY0C:ui2CbNXoQWM/hDzu1G1yOQo6r","tlshash":"42330248edb40b80c272ee7d469177b1cb24ff69ce4ba85f6484b39b307d5a2d863854","first_seen":"2026-08-03T05:12:55.403392Z","last_seen":"2026-08-15T05:46:47.466363Z","times_seen":22,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vswaysbufking.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.105Z","timestamp":1785733992105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vswaysbufking.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"8da8-19e87ed45b7\"\r\nlast-modified: Tue, 02 Jun 2026 10:42:14 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9uXVkiAXM0EieA7IuRIg03jP32lsm4OQ%2B2v1TqaHwqS%2FNtd7HO3wW1cEn3o%2B0vUxylrOlf2RqvWmz3Nr1%2By9JcB0KyD7IgApHKOOcwAgVVnLqq1KGcfgoCjtm%2BjFjuE7rg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4eaad0456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36264,"size_decoded":37692,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b3d75d1af87c9ad72794038faaae824","sha1":"ffeded66b540d06ebda245980fd5ee5a8195fd5c","sha256":"c386fae87b67d197f492e6d56c1b3fcb7a2f2e6d1f619011b32844402945ad86","sha512":"6a04934a80321de1f685b065c772ea9bda511eb8b4398e8d9b609afbb4dc438c250151150bc1a40ba49580dacf6c2d964154ca5ce55f8a9ada498db11a50039d","ssdeep":"768:LNZEgovkb7mJXzOHZTPWlZJi1RqNIMfiGxETNWAwRxb:BZEtcm5zOwZJfNIMtxETNN8xb","tlshash":"fcf2f1d89e75f4e3b70af86785ec00b5d0867ef7dd1656b0dc4fa2623492927b248d08","first_seen":"2026-07-10T22:57:05.875896Z","last_seen":"2026-08-15T05:56:23.276743Z","times_seen":34,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mine-slot-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:12.047Z","timestamp":1785733992047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/mine-slot-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:12 GMT\r\netag: W/\"1b448-19e188c4ea6\"\r\nlast-modified: Mon, 11 May 2026 19:38:28 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 36046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9H0KIqR%2FOOI0E2Aj30FgMOSxQOba9futJgvFBIlL8DGp1haY1rHMDcPRx5TzWk72wHDHhV%2BW8y%2FlU6sIXAsyIDAif8PElmUPj8KTImA8vqo1pFak1pH0oidouEHC9jn6hCk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a252d4ea4cf056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111688\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111688,"size_decoded":113114,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7406dba4e1b62922d069c29462970e92","sha1":"2bb50a426fc171056758c2f1fe4da069bd317a55","sha256":"a1a7495aee2e2ec7e96d71aba77df32c181435df6daaf59f1f0dfbcbb1a89397","sha512":"f5624722848711d80f1d17db89bd6f160f8e8535f5c6e5b397925b686dea04c0239eca11ccbf753ffdc1e97d2c5006356d4ddeac83501b989309a8a3c62ed43f","ssdeep":"3072:PBZq2UAp8x3gncKwSfB6eC3QxHPq4Sh27r2neBIQWzUomhHVD:a9Ap8x3zS7CDt0PmeBIRt01D","tlshash":"04b31242f3751568dc6d93f93589eb067297838883476aa6ae233256d409470b78cbcf","first_seen":"2026-07-10T22:56:48.049907Z","last_seen":"2026-08-15T05:56:23.289574Z","times_seen":77,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:21.938Z","timestamp":1785734001938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://grandmoney.top/\r\nOrigin: https://grandmoney.top\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 03 Aug 2026 05:13:21 GMT\r\netag: W/\"abf-kdQHLUFUsZN2IqJYI2j/z1AG0Bk\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBx5WjfaAh77zlGHmbXsZ719rKC3LDQle5uxM6tAnoVZBqWBKINcxraQWb6RN52L10kEkpVyvQCvKzuSyfVl8%2FrYQwiNYdnhOlc6m1SewOiyxgLPKReV%2Bfh9TIk2hJN665A%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a252d5281e1656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2751,"size_decoded":2326,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cdd37a8beda99c82d9773fd080678177","sha1":"91d4072d4154b1937622a2582368ffcf5006d019","sha256":"363608135a7d2570b0f4edc7604e4dc7ea11e53ccb0199f7907bceb52622f8fb","sha512":"59d83fce1473bea552da5d63a7a3c1e5be4491203ba78dea5ab1dce52ad65f98f2be803120c75875749cb70a73be84af74771713f7ac4c095d8c684a982972a1","ssdeep":"","tlshash":"3d51f07f55442cbddb355a80888a709aecede2af45e10c4c81da4d3acce45e6297c527","first_seen":"2026-08-03T05:13:46.958128Z","last_seen":"2026-08-03T05:13:46.958128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grandmoney.top/assets/vendor-i18n-DUl_EuQy.js","fqdn":"grandmoney.top","domain":"grandmoney.top","tld":"top"},"ip":{"addr":"172.67.188.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grandmoney.top/","date":"2026-08-03T05:13:10.838Z","timestamp":1785733990838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grandmoney.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 12:13:49 GMT","end":"Fri, 30 Oct 2026 13:10:13 GMT"},"fingerprint":{"sha1":"67:56:77:68:A9:C9:01:AE:C3:D7:2C:75:D5:20:1D:0C:88:E0:3F:59","sha256":"DF:66:23:0F:04:16:37:6B:88:55:F0:26:45:FD:93:50:8D:8B:8A:47:9B:B0:E0:C5:FA:A2:00:6E:DF:FF:5A:09"}}},"request":{"raw":"GET /assets/vendor-i18n-DUl_EuQy.js HTTP/1.1\r\nHost: grandmoney.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grandmoney.top/\r\nCookie: __ddg8_=SH42UziUlQuok3eE; __ddg10_=1785733990; __ddg9_=172.64.209.50; __ddg1_=5iWIbJwuSBgA9HXP6WPN\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=kYK38Slf8hawf5yi; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg10_=1785733990; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\n__ddg9_=162.158.222.24; Domain=.grandmoney.top; Path=/; Expires=Mon, 03-Aug-2026 05:33:10 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript\r\ndate: Mon, 03 Aug 2026 05:13:10 GMT\r\netag: W/\"6a6e5ecc-ff46\"\r\nlast-modified: Sat, 01 Aug 2026 21:02:04 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 20640\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FP2L8reJFNSK7MpP7zfj7QhUoWI0lVZoaU8rDKFm3v9N6tylMjiaHup5r06NRF%2Ftr4EZChDDs%2BTFkJjb%2BqDp6St3eJvfjTBQLG%2BfmfSOytOJx6dEqMMALNarFGKiAlYI8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a252d4e2b9862efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21811\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65350,"size_decoded":22978,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65333)","md5":"0b9b608f1f1295dada7e3bd5c53885e0","sha1":"938f62996561bf1906bd205eeff8e7c6c26a2977","sha256":"c3a32b396502ee83fb80b11eae02a203a5f9625b78e4c3e3bf946cc1cb8dd1e3","sha512":"fb65170d5dadbede34808d5209c4be82b3003633987a0a9bbe40bfc7053657189314fa61382df4d35b40f95fb6c3db898c4fb48cd82d27e9e3348543291d39f5","ssdeep":"1536:Zbi7OVOGuNi+6EOl6ZG8N42fLm3NfLiaphW4:5JV4OcZzN42qM89","tlshash":"655319c871faa62643ea40d530711408f739ad583448644dfe7dafd6e8d3a0a92fbb34","first_seen":"2026-08-03T05:12:55.439388Z","last_seen":"2026-08-15T05:46:47.483642Z","times_seen":22,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}