{"report_id":"d645f661-8ff3-44e4-b1aa-18597c67f957","version":0,"status":"done","tags":[],"date":"2026-06-29T06:55:26Z","url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"104.21.82.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"title":"Vegas123 Agen Slot88 Terbaik Sejak 2019 Proses Cepat \u0026 Terpercaya","dom":{"size":24819,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9923)","md5":"ef1dff3847145385b7b8a58802a24fae","sha1":"36774795614a3913da3173dec17335a6cef8307d","sha256":"604a7e1e8a4ae60f402f476302f14e7d188f4fa91d62789e48c4e4cabcf39224","sha512":"998ba7a6e255be1a61304d7b377322fe6aefa8574cfbcdf932f301621daae41e46a92d1decf8e0903827e9a2f93ebbe7493328f6afffeb9eb4d4c9a2d7dd98d0","ssdeep":"768:Ca4fyjl3V1ucWSsuy/8Ceme9vKYEgYkGN3z:74fyjl3V1uzhuyiyYEgYkm","tlshash":"a1b2e073a8031c6b660be4909923030eb172d607d6074e157bfd6398efebc61944bade","dom_hash":"domhash96e81e7c4d0d56d010971405647bd074","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"104.21.82.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T06:55:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"res.cloudinary.com","ip":{"addr":"151.101.65.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-05-24","domain_rank":21175,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2026-06-22T14:54:36.293824Z","alert_count":0,"request_count":1,"received_data":72999,"sent_data":588,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"blogger.googleusercontent.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4332,"first_seen":"2012-05-25T17:41:01Z","last_seen":"2026-06-22T23:36:58.914775Z","alert_count":0,"request_count":1,"received_data":12869,"sent_data":770,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vegas123jpku.com","ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-29T06:47:04.632877Z","last_seen":"2026-06-29T06:47:04.632877Z","alert_count":29,"request_count":29,"received_data":3433946,"sent_data":16145,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-28T22:47:06.167692Z","alert_count":0,"request_count":9,"received_data":805447,"sent_data":4778,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ik.imagekit.io","ip":{"addr":"143.204.238.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-01-17","domain_rank":153981,"first_seen":"2017-04-02T12:17:08Z","last_seen":"2026-06-26T18:39:39.415267Z","alert_count":0,"request_count":1,"received_data":10866,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"ImageKit","description":"ImageKit is a real-time image and video transformation, optimization, and delivery service with built-in digital asset management, powered by a global CDN.","website":"https://imagekit.io/","common_platform_enumeration":"","icon":"ImageKit.svg","categories":["CDN","Digital asset management"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"img.viva88athenae.com","ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-25","domain_rank":168367,"first_seen":"2023-12-25T05:56:51Z","last_seen":"2026-06-28T21:20:32.656038Z","alert_count":0,"request_count":73,"received_data":1845617,"sent_data":41696,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":8,"received_data":239142,"sent_data":4661,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img-2-2.cdn568.net","ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-05","domain_rank":794803,"first_seen":"2022-11-21T05:57:08Z","last_seen":"2026-06-23T09:26:06.757375Z","alert_count":0,"request_count":20,"received_data":62086,"sent_data":11214,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fkupon.com","ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-04","domain_rank":0,"first_seen":"2026-04-17T05:54:40.927007Z","last_seen":"2026-06-23T19:50:44.348623Z","alert_count":0,"request_count":3,"received_data":50472,"sent_data":1557,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":2,"received_data":39770,"sent_data":1110,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6945775fd422a63038a501cfb2a107d2","sha1":"8cceefecc73f7e7c378c27ef7d772acb3a6f25fd","sha256":"17271d2b75bf794d3c7a23256f39e2d0d09abc58c3547e3eae1188423991c113","sha512":"4835b13d86efd399e2b16eb1cad07d92e35515d771d66dc6a616f358f6f10b6daf27c58a8ad52e27baaf94bf9f1344343d11a7771476416e603dae244f124a0c","ssdeep":"","tlshash":"7b1126241bb10220010af6869bc95750a23c416fa444dc1a7d6d56aa6fa2f1a22fceb9","size":938,"data":"","first_seen":"2026-05-25T18:44:48.045692Z","last_seen":"2026-06-29T09:08:44.863542Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aebc7df0b43ec66cd0b88b688ab6b8d4","sha1":"64ab7d42ade1cf7748f831984fbac32becfe7aa0","sha256":"d4837ef7a120e453d68b7b4722314ea2df2b0bc97e6a49b7cc69a8856a19a5d2","sha512":"8a4fbbe21e05579a0721e52af15818931ee665ae3f9491602c2fc8a2ed88fd680e635fe173668e2562af9acafa05a08921ca4a7ec26de2ce1ef53f8e1d5def4d","ssdeep":"","tlshash":"d641c52af1db0dd34027ace229fa8b5037584157644686123e7cd54d6f63d1b6c634aa","size":2131,"data":"","first_seen":"2026-05-25T18:44:48.046694Z","last_seen":"2026-06-29T09:08:44.864066Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a2c5671ccb10ba0ce000876153db18e","sha1":"852b1bfb2851f74ac7b4446618cbae9536f934d5","sha256":"ed7ffb4687b10a92f68375057eef0869ca616a05b95a6d91b44ad6b98c8b70b8","sha512":"2c2cb29ccfa304757d457337d7df7b397238b076d567301f25b1db42a13f00626b5e06d3e9205b9d94ed20bcb7b6ff947ce60354b1f7db3a6f40a3cb459182b4","ssdeep":"192:bdLXEAB7K0tHXdFVEm/38KwqgzLDXV69LVSyQgkc+HXSixyeNfuUMc+28fzmJZ6v:bBbttEm/JsbgHuQkPS6JE8rI6/e","tlshash":"7d62ad9975b3706b4523e0fd4bdf8016a3248817210ccd44bf6c9706bfa6b64cef5a9a","size":14756,"data":"","first_seen":"2026-06-28T10:54:45.52163Z","last_seen":"2026-06-29T07:01:41.341298Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74df8fca7b4a6b069721f31fd1c296e1","sha1":"b069161e5ea882abcd3f75d402dc48c2a67bf5be","sha256":"543acdb3975d394e3f0125d19550bbb4fd38fa978740aa718223268d355710fd","sha512":"2740afb2ef84fb59504d243f09d020b3b095bd74f1ae38c422e5d6ed27325eecd61d6c2372b4bab650df92b92ea72f65cc6e8158db238790e7af033be15cde06","ssdeep":"","tlshash":"0dc09b5b637515314567555105eb41643410d18b1505581d3d6cc7724f338550756a84","size":140,"data":"","first_seen":"2026-05-25T18:44:48.048921Z","last_seen":"2026-06-29T09:08:44.865642Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ca086bc669dc32eb507134f1524bbd3","sha1":"1516d38524c295adda0375c12dc5c4fc2077706b","sha256":"428a36d6d0bd878d87175009dd7f08d6d1d534265acdfcaec2599f0575fcc205","sha512":"e798c1914e894dd3bba822f56229e60bc27e70c2d78943bd8f470180d69a5183c30fcd1adcc60a5df666c646eafb915acb266be190b64b24a1fa99011079c710","ssdeep":"","tlshash":"b9f0a35d3c56f0573bfa3535c2278f6f3765070075839524c646cc3468554861856d8d","size":443,"data":"","first_seen":"2026-06-28T10:54:45.52294Z","last_seen":"2026-06-29T07:01:41.359038Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b49dd960da8bd5829e952c97fb46a83d","sha1":"b95892cdf89e2060c4fb004af8d609307a1073b7","sha256":"32aa8675fd9d2060440472e22503dabaa1ff7e92711b5789eaec64c036d1a305","sha512":"34e34608b043ae6784894dc34d31365f33abd664ebad134073284c3c14d88b68513f89a4d852ffbe6213b09ee4a1db5b48e6a2ca44b5154eb3dca260f6647b80","ssdeep":"","tlshash":"e1f0a39d3c57b06737f93634c2279b6f33550700b9c35524c645cc2468545c65886d4d","size":442,"data":"","first_seen":"2026-06-28T10:54:45.523822Z","last_seen":"2026-06-29T07:01:41.36021Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a6aaf6c01a97275453275564924fa1d","sha1":"5d7762e5749f901f4619bb25fdf8a1e24ca66690","sha256":"321834a44fe20bc52a19cff8d6104831d5dbef46abb1bd3962bccecc3f3135e9","sha512":"ba81c274fea9094781800ae57065c3f344f9092944ff31eb8a45f8c0d15d875b51bd1c940a61a44a94d07118335450875212baf7862a356633999ffaa4c2c873","ssdeep":"","tlshash":"6e014c3e0422497b896f1159f968b2b4b9d001e89c42c40f445ecc0fe5a4de22c6bf3e","size":716,"data":"","first_seen":"2026-06-28T10:54:45.524697Z","last_seen":"2026-06-29T07:01:41.3612Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ded3dfb55108a7e21a9e1143e625bc6","sha1":"f7cd7fd043d956cff89ce9d470c5baecb0bb580d","sha256":"6fe408c0eff90c9ad9156155f4e616ff560f6d4953b5a63d826d4077b9e72af8","sha512":"6c0d24d6c3bcee0ca4920f9c4214f33eade935dd5e6c0b2e5a946f770ade324c438474f632d89dae91308f697c5812587c9bdc8f62187d2b86cdc5121f45b903","ssdeep":"","tlshash":"3d41ef7af9930c77a9cb21b947fd100c747466778809de0c352c5a218f3fda8609dad8","size":2420,"data":"","first_seen":"2026-06-28T10:54:45.525509Z","last_seen":"2026-06-29T07:01:41.363569Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"908de227b42a090f4819abfb4fabe64c","sha1":"b88c6f082c99743410dfa02d015623c958cb774c","sha256":"4f9da9ecf23a3f05f1b69a1a07ec5fa4aafa9fb52f67d1e8b175c222c5670bcc","sha512":"f0b0543ba39cc3da52a7a38dab66858ce1f1c7d8fc0c616d700f8fa0f37d854b4a1ed522b45be76b6dead0bb64c53550ffe5ec579a11bf44a3595e40f76c8d44","ssdeep":"","tlshash":"9221db72d16496320193c8e59ef7072d35c5811bc8034a8a7bfc475e8fcae84fd71180","size":1399,"data":"","first_seen":"2026-06-28T10:54:45.5264Z","last_seen":"2026-06-29T07:01:41.364872Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f3567b37024e10d84991f95473b4ab4","sha1":"fae2d230c3412ab1f294bb483d7c4b0ba7584860","sha256":"a4aed6669fd204081341fdcb308a58ef9f42a920d4b216e19abd6e601b9f5236","sha512":"6fd8593252855489827458f1414378d1d7bb352de947d5d123d1819bc81fee9972274b045bbb79d732e34d7617843142eab1b27a10831ed37a12b96efd77a43a","ssdeep":"","tlshash":"5121f165d1479d07722bf4e4b4501787b2d3832bdb03092ca1f752a696cac3022562c7","size":1364,"data":"","first_seen":"2026-06-28T10:54:45.527293Z","last_seen":"2026-06-29T07:01:41.369304Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7404b6c2a25d9ab4a1551393fe2bc8d6","sha1":"3e563195615a05a6b7de7b36fa5e97ad53363c7d","sha256":"8322899df8c1ad6f791d9bfe1f4c36c35b4987c01300df8aa20ca3923943d2b5","sha512":"e2d22b4c58c09afe9469255b61f6ca4e988799196dc653e9a09f9832e8bf4d9a80b26e33b6f25d5cea493cf20a9cacfc78c6f1a0148d87640498db84174652c4","ssdeep":"192:SNCMFC3C3CyH/LlQltMvKM3q+dY4NLAL4h6yb6SAKa:J4RAkh6g6XKa","tlshash":"dee19b1835b30029c65730ba67ff5914346cf10bbc81ca48ba6c8a1a5fe6d9df4b669c","size":6906,"data":"","first_seen":"2026-06-28T10:54:45.528148Z","last_seen":"2026-06-29T07:01:41.372591Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95354ad15d1abeb376dce1dd5e8b025f","sha1":"b6e1f5f4f9ebd7c7f35f64af50916029c6bc466f","sha256":"d01c83153aea340a3422d2247fd996f436b636a1e65cd396778a440076d0aefa","sha512":"3be8c34cb18922907866ea7a48aadb1543ecaafde0ee6935a85d53f468e30cf3ecf3a8d58591d4f54545bf790b8df43ca4e99ddadbdf4b32ba8a0f0189a08b57","ssdeep":"","tlshash":"e201d089bc467076ab86362c713bfa07516312196854683358fec7bfef32d97410368c","size":741,"data":"","first_seen":"2026-06-28T10:54:45.529178Z","last_seen":"2026-06-29T07:01:41.373976Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"120734f88cb37a93a54566f6e7cf6922","sha1":"bcff17bea73f7fad0282f9b7003248ab779f481f","sha256":"0f07f73b32002ec1624d6718cbdeba54591288396351e497b2e6f19d28ca1158","sha512":"e955d637425ddb25c5d68096561fa0a605ba0d2701d8e68a89ac577fba95ea15e8928f553c41e7174c5a082eb9ce20d9940e6cc137275b1c40fbd34bcfea4ece","ssdeep":"","tlshash":"3ea002417eb58880622946558aa716610709a50e29044617f0dd5581bf80901f611667","size":73,"data":"","first_seen":"2026-06-12T01:13:43.34395Z","last_seen":"2026-06-29T07:01:41.374998Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"329716436da113d2050cc70a6a343c43","sha1":"0421d6aa39b6cdfd369386b49864ee69eae7e5ef","sha256":"42f703283baa244c801689e1382b87a8a87724f2bd22df4234e1bbf9b453c085","sha512":"49618da7deb8c76feadaf41133be6e25be9c278107379651e7ec06aaae432bdefdc6208658e266132218f8f5d68acbb548341c862e1f58dc4f0de5ed8c8434a6","ssdeep":"192:L9w28Od6wtvIEMViKSNilCMio7ifSWls0Zf:ZuEmuf","tlshash":"d5f18b2e41b71972486371f99b8f244431765003700dce993e2e5b016f96a2d9be2bff","size":7805,"data":"","first_seen":"2026-05-25T18:44:48.055365Z","last_seen":"2026-06-29T09:08:44.869559Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f14d215e3a010b535cf36231a6576122","sha1":"93842cb820683049cd3d75c0000024aa1bf1cbf9","sha256":"a22d756e9dab405063a75f694d0c7527fa398b8e2854b68ca1e8cff89dabb90c","sha512":"89826f800462e6645deb1cbc85a24125e9b65d3967cc21a7e052d9d1b9792a9e90bdf5b682e3002329f77a79f7e06595959e6a59f1362e020af41ffa354b5d8a","ssdeep":"","tlshash":"4871ef1af25705220acf69ba27e3078535b08447a504ca073d2c56656fa7fa7263abfc","size":3672,"data":"","first_seen":"2026-05-25T18:44:48.056367Z","last_seen":"2026-06-29T09:08:44.870091Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"184c2760f1a4a46c43499b0291123213","sha1":"ace8c50a50fb41a685a007a1ec28f0c71d54781a","sha256":"871a2af48a2b3d2bb194136682398f84bff809fce019735c49ee0741f0d55a62","sha512":"c690d8e14f4e98117bca5b8fbb0af9b5e44298e2e362052ed9df26ef605b1d34a5fe59e6817ca84a04a80baf2dc77cdc50812952967053641ff25ff7feb7257d","ssdeep":"","tlshash":"3c5140384959093110b3a17e2a6b8345a3ef906b141dec20febf47906f4dc1e47f29ab","size":2915,"data":"","first_seen":"2026-05-25T18:44:48.057271Z","last_seen":"2026-06-29T09:08:44.870568Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7b7e971f4e1297e0c6ad67ad2603d5","sha1":"858c6ac6c4a276b5f8e650455536176eb7ea53d3","sha256":"27d1ceaf74e5d68d32112cda2de5a96a3de6e74915655116d36e5b4eafe2b25d","sha512":"dc2dbb5afe0ae644eb1bd28c3f79ab034d5565c4fe512b8bd639134626f8bc3ee06429db7668e2bbe6bb13ef55251cf4a22943fbe3c3817dfdec350dab948101","ssdeep":"","tlshash":"61f0d8af36a1202581033257ae5ea80c306790072545cd223eec84816f90c363b39f6c","size":467,"data":"","first_seen":"2026-05-25T18:44:48.058442Z","last_seen":"2026-06-29T09:08:44.871044Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d944b4b541f75e4ae85c568214369c9","sha1":"b4544ee4f79975e1e4ba2c6ab35922a4a85e586c","sha256":"1fdd0eb738de830758a388aa930ad859fd7f26ae8c70ac338251da8785290565","sha512":"af42d6fce34594fd83232127d9a11f1ddbac58850d27782ae1b6a91c36845fd983c7ab337a9619fdd0079fdc176223a9ce7412c85bd36bd4c4b4a99b156176d4","ssdeep":"","tlshash":"10a012dc60b9a10402242b80495b415c301e5009310e3cb2000c0f04471045400c5114","size":84,"data":"","first_seen":"2026-05-25T18:44:48.059247Z","last_seen":"2026-06-29T09:08:44.871524Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/widget2.php","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d4fac90f1ae2655c7fe88786e48723f","sha1":"9de2d976a4516e1aa318393f2190da135c8f5906","sha256":"0c310f3043b3904e0c0e51371ef35e43faf73398492e2958a11f4969a3487770","sha512":"0cc67f1d0786a09f993efbce1c1d3707aa422f3d3d344846ec11be2bcd40715cf6fbbde9fd3080cab2d4caf9b7d7ce1f045a59a58c585044b622cca8d3872a08","ssdeep":"192:uueuH2zVnuKYEgYkGN35ZyhquNVaLrVaAt0+m:pZHOuKYEgYkGN38q4","tlshash":"91d1312eb9b310b6a973303d5baf510839725603210bcd347e8ea1984fe8816565efed","size":6206,"data":"","first_seen":"2026-05-25T18:44:48.060298Z","last_seen":"2026-06-29T09:08:44.872013Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/driver.js@1.3.1/dist/driver.js.iife.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b77b834b81897997de86e6ccbc0d91d","sha1":"933ce084f934477d992be47634d95b62af6634e1","sha256":"3e3790dea8118c80a7a1d81af9454f8f6fe9a5dd180e843ce8ba638c5b446753","sha512":"f04755e03e559502d7d1d24571dc7a87fa09fcd6a70083256958b3e7b343921cf06d0b3169b82916e6b48333387f9bdd93ad027d103276195b7db0d384c7e1df","ssdeep":"384:s5RCCTFEoyA26uPEJVpLoXuAWhH3XyKByxtyXTtzQu9yXdb77FMKtCNqbfE9QB3z:sntR5726uPuVpLoXunhH3ChSXiXdDFMS","tlshash":"1192d75824143535933f385ed5b7874a7b302670f112859070be886a276fdcad2baabf","size":20322,"data":"","first_seen":"2025-07-17T08:23:56.415028Z","last_seen":"2026-06-29T09:08:44.858266Z","times_seen":782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/js/old/jquery-3.6.4.min.js","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-06-29T09:08:44.782103Z","times_seen":3720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/js/old/new2-webduo35.js?v=1782112559","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c4e6575a2244de4704267b70c0d7ab","sha1":"55c3917ada6d548f15eb4395ac4858d2f61539d3","sha256":"94c8001636010089dac9312b1edb120556ad4e55e14a0497b78a3882ac49db72","sha512":"2a4afc432a780be169028d5274813a4d5a52d98c99eeff5aa6b1efde9bde19a5e178e9bbc6c8b8b13416f50c8cfa1b884a4ca1b0829a2681c7e81f82e8557545","ssdeep":"1536:LlNm46JcJAvMZrFhPO/CD7eJe3eNeyeiC8iaWiAQiI:u4sEAvMdFlO/CD7eJe3eNeRiTiPitiI","tlshash":"8e33424afb4c4a8f47f327a488378145af1dc835e20b4b05fabc48887b5a6557371a6f","size":52029,"data":"","first_seen":"2026-04-26T09:11:31.857142Z","last_seen":"2026-06-29T09:08:44.863017Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/js/old/jquery.marquee.min.js","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb33cf2aed11f9e6d82f325e3a59aeaa","sha1":"23269fefa9d4c96301289553b145f6cf2224dc5b","sha256":"98e6d279e0a953b3aed10af732b0144fac9ec784a386750259b6b03eb3f26d93","sha512":"547b353276af03a66bd61b1b4ae7a41bbf604c6c69be27da542a2a9473e9dc96095f5df9b7591e74f71a264cd69076b44353f9c1c104f7472cdbdea82bda1963","ssdeep":"96:zceMfHftw6RX2wUb6cJkLIoeUJZYfShCmxxAAFzYi0yBo3nNyJmmxfbgFlUOvhWX:zcFfHf5kJkLIoeUJB/N0yB0kbfb29Fm","tlshash":"a31220d2aa703194cb9703bf948b02864e72d931641d0d7fb4b38198be60648bb17f3b","size":9052,"data":"","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-06-29T09:08:44.825273Z","times_seen":1376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80578,"data":"","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-06-29T09:08:44.823606Z","times_seen":5532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.130Z","timestamp":1782716092130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //fish-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1874\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Apr 2023 12:41:47 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=5584\r\npriority: u=4,i\r\nset-cookie: __cf_bm=eIIUIMFRWPywk4dcmNl3B7LfN1AHCNCy.ECtpfj87qw-1782716092.1325588-1.0.1.1-rpIdPtVPzUjhGNw19mRYe2P9qv1BducNIJJ7P_Xyhz5lF7FOMpnCED5yRUPjcMFUrhvL1hqA_pGT7gYrdVp97rYMPavcm_JvXb4nckqIYkOWYiTAEoZVVazJAD65LRX7; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2238\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7dd9a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1874,"size_decoded":2722,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aee6fc0c74426166a631dc703dd18435","sha1":"b835716a43afeadc19565056eb7c3de94358e656","sha256":"3c0b4942ad2984422affeac2a3dd2bba982cf91623f2706e607dde9e935b5bdd","sha512":"6b723c0bd20156a0955b204ba50db0b7ea2f8f842fefcb20e7c182600f3960888310caa2c63550fb972c8a08944c95b5094d2c506e1e939a269bd4dbc9cf0f86","ssdeep":"","tlshash":"4331190d74e743ed67dfaed1389828548d20b00bda97b6c9a3587c0e41ae0a4c3e6040","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.773735Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.496Z","timestamp":1782716093496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 03:23:28 GMT\r\nexpires: Fri, 25 Jun 2027 03:23:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 358285\r\nlast-modified: Tue, 19 Apr 2022 18:29:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9588,"size_decoded":10400,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9588, version 1.0","md5":"55d912c794126956bb1e8f41597c131f","sha1":"f7ade582dbe9d0efe97ae105cab313c6e45904d4","sha256":"8bea498aed7cc1366e8b966e467b98219c803107d728eab8a6c4c9b045def699","sha512":"e83f80f681e02894d4ea32f0829b6cf5d04ac2d8b66b4f9363d082e727d201d09f134a84efa27391c78cd61cc2b0b3b1650ace011e4e96b4a504a18df5b7485c","ssdeep":"192:QVZUvG+5fOvM9EHseAuFxuPoii+pw4Srov5nBbs2TpP+W31WAgu+VNne33/:QVEZgM6ICYS4JBbJlp1WY+VNen/","tlshash":"7812cfc4c0887700da1fba3a393c0f6b62ad6555e4e146664c004eaa66fe5f0e00d73e","first_seen":"2023-04-07T13:32:31Z","last_seen":"2026-06-29T09:08:44.778663Z","times_seen":8186,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/favicon.png","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.547Z","timestamp":1782716093547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:53 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jan 2023 02:44:16 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBTQPzgubsMr8GofZmOJpe9D7VrmCMwibXbh%2B5pBL3DmTgCqERyEdCZ1M5QWKc9VP4fWf9WNzyWM9raTwV2gD3Bzl4xnqlIzdDuPPB01IU8xmuOyxGE1PMkO%2FahD1fXp53xa\"}]}\r\ncontent-type: image/png\r\nage: 674\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 72231\r\ncf-ray: a13305c0aec05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72231,"size_decoded":72902,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"df4fe17c35885b4c3ee31f0a5ad5eb18","sha1":"97dededf1399b6712460b660ba8009e141f204e5","sha256":"a90c51b1bcd819981fc9641130e3c1b1e7e831b07c0fb6fb8381402e0a8f4b2f","sha512":"3d3f00af265dd0532c12d6e32c8bd144e5d388d76715aad19a680e7c3547154902f07600c3e8f7cbd5b767e9a3d0b7865ffe4509e40460f80c46bb15bc7041a0","ssdeep":"1536:uV829u8MRxzyxtMbHMM9xqPGvr7CShAp9bvkFSouW:INtuxzH7MM9xqPGrG/JcS9W","tlshash":"e8630118fd78ee20a8d2fd0b19de219050365cd2e8d694877c5e5f8b1f696096f2b0cd","first_seen":"2025-05-28T13:20:26.416853Z","last_seen":"2026-06-29T07:01:41.218418Z","times_seen":136,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesansflex/v21/t5s6IQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4xyRg2eWITmjul.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fkupon.com/widget2.php","date":"2026-06-29T06:55:00.422Z","timestamp":1782716100422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/googlesansflex/v21/t5s6IQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4xyRg2eWITmjul.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fkupon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50880\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 22:07:02 GMT\r\nexpires: Fri, 25 Jun 2027 22:07:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290878\r\nlast-modified: Wed, 20 May 2026 16:44:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50880,"size_decoded":51693,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50880, version 1.0","md5":"242bf1c5586a03eac78190c3ad4b8b8d","sha1":"34a3a16b17a15be7cb502099f39ece5bf37dd642","sha256":"cc6c0d58aecccc9dbeda87a4c03b2e00c1cab531a3b56e52a739d2f09aa09373","sha512":"c0ad3b363ec1b734dac9a79161d7e170f61729a4a8e575f9a503b6f1637720928b3c448cd7de6ce603535f8af275c70522639efccb49b0850a83fe92790bdb04","ssdeep":"1536:D5PFi3gG1k8kgexHooZhGP7hvOm+EhlF8Hs4EJR13EvlC:D5PIgG+8kgeJOxp//WHjsR13EtC","tlshash":"8e330233a071fbebc6d7221d575027baef3d2905736599c17008b414cef61b738a98a8","first_seen":"2026-05-22T23:49:57.434981Z","last_seen":"2026-06-29T09:08:44.792025Z","times_seen":389,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/kontak/whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.870Z","timestamp":1782716092870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET /kontak/whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: __cf_bm=sDqXyG2u71HEhT8p2MNJ658fPMiloGSexkGWfPNwSKA-1782716092.2044237-1.0.1.1-u4StqQawPA5jvPA4W9tQem2v7NSOZq4KDLJGJjS33.k.T6UURf41luEXhnMPX7R.5VxkA.ROiBkp02hCGfwMWgUeWR27W0GKWVUqcdXH0QVURQSBfFLapBbNYKttiEzj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 378\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Feb 2025 10:50:46 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1628\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 1475\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305bc7a1123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378,"size_decoded":898,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d9883e1a072905361ca73d34a57734","sha1":"c9dcf63a7866cd530f7615bd220e7ce4e81aad0d","sha256":"a06f5509e0ed17a2901ee5d71717a549f53e66dbec7607e3944cb418c60688c5","sha512":"fb470bdc215ebaf74df39bba27c8887b99765385ebf31d4a06258c7f3ca92fa0084ff9dd647cdf0ec4bf7a461468754366a3cb6d18343b3214f8d7b23313a08b","ssdeep":"","tlshash":"43e0f1b81c50030a5df62d07a3100fac4b7905c55b56fb23a1964dd07100ce4483379d","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.814581Z","times_seen":2607,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/new-webdata.php?content=data","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.652Z","timestamp":1782716093652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /new-webdata.php?content=data HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:53 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwING2Hp%2BWuIii99dtIw2sD221igrrjfhq%2BOTbH1GLErvOUUWIzAFlPjQuUidwKaaJ0o6M1DQgkBdqr%2F7A0%2FA6XDIDY0OeHqz6lYGBoGQTo7HFo%2B%2BBrmeIJbpbNSd561pH%2BB\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a13305c15ec85690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":942,"mime_type":"application/json","magic":"JSON text data","md5":"fef53117f7c8369660f805009f35a44e","sha1":"270eceb758639a2f64d47eeaa439a7501ad1d89b","sha256":"ddd0c9ab154b07016bd72c936d8d2021aca143c65ac3200359c70fefa342870c","sha512":"67e2ba3c783c18c7ccd79b82b7e0e80661165d6d80bfa3e9c323dba10831359db89403d5ba066e47f3ecd9bb0e98c1d08202dbc67fb1be1530b35d82d23253c6","ssdeep":"","tlshash":"e7d0eb10f648be120408ba72a1d490dd2aadb37bcf09c1348400842f0f8303fcef6b06","first_seen":"2026-06-29T06:55:32.406156Z","last_seen":"2026-06-29T06:55:32.406156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.062Z","timestamp":1782716092062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\nserver: cloudflare\r\nlast-modified: Mon, 22 May 2023 04:44:20 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=1584\r\nset-cookie: __cf_bm=qxFIPpun75JmAAXX9EuRwO38WV2rSSNLwxQati3.WqA-1782716092.0638857-1.0.1.1-6m2U0HnP86_WYNkNuOfhGfBiANnleT0ovkjjpFLXNJhIphTrB6JJ_uJkclYUu358Pt91jLxrvRFcNribzdHNsL6csY4sHTU1NpoTu.av_qTQxH4JrfwrsTjW8x_rPx47; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 2742\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b76c5a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":1639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-06-29T09:08:44.81001Z","times_seen":3371,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/interactive.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.217Z","timestamp":1782716092217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icons/interactive.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 388\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:01 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3417\r\nset-cookie: __cf_bm=6kPebPOe3ORe2acxz0.xSbwqY0G6zEvtxxhjYqYTRQg-1782716092.2193267-1.0.1.1-Ky40VtNZEykgow9cqs8LSjMieOZhPA5N3.zzCHcaRti4pRduTxaam3sezrI019r5NNO0D_mKotEaGuk6c9lmt225jYpOlyI0GSnIb2jErmnn.6bV0SqJRi76aGwAlUto; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 931\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b85eef23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":388,"size_decoded":1234,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cc0dcea77b7295c691fe07673177a86","sha1":"666431536479501ce70432f76475b7dc09ae70df","sha256":"5b8992379e55caf367e94b27323cc0e64b656977881a2ec14c95e652dc527920","sha512":"c48c66c5b41ac16efe1ff90bc4375866f13303aa320f64feeb13cedd480bb4bba5422a6965bc2c81700de0953d0ff17e010e660ab5c993bf681be6388cec6315","ssdeep":"","tlshash":"9de0f1dcc6a89a046504a0d07633370dd3d2d586138dba926345f430122462dbe28cb0","first_seen":"2025-11-19T10:28:57.292064Z","last_seen":"2026-06-29T09:08:44.797611Z","times_seen":1795,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Morocco.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.770Z","timestamp":1782716092770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Morocco.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1434\r\nlast-modified: Fri, 09 Sep 2022 06:18:12 GMT\r\naccept-ranges: bytes\r\netag: \"0ea27f013c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 185;u=5;i=?0)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0nbSWGc%2BM8wz8vGEuVISR9dmHcsQJxG6zntAoIp8IDhzwzjjliOEqozQswHjUHs33jsxT4jCMXYpSU4S%2FvGoQzlKhW6ig1WlXba3Cab8SXskwNLHSzvwZ%2F117XugRM0DuBbCg%3D%3D\"}]}\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1719\r\nvary: accept, accept-encoding\r\nage: 187473\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=zIVo0O4VzJa6_N_yyG.S8nwxvwNqEKbXbwNB4mBSsaE-1782716092.7712882-1.0.1.1-aeY8ku0.bPaUhu98SPKLP8NJnNpW1CEzDAk4bzUWN_CkVfuCU2bumEG2lx7QxScTX_Vt78KByLzBX6JHHl2syC87PM11PiRKHGbvGbOdfMOYdXHLPKSUf51lQuXr_uKQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bbd98e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434,"size_decoded":2645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"048c6a5cf29604627a508b7a3e6fb7a1","sha1":"b6db8486ea4800e957c422ff1a591644688f2c1f","sha256":"a8e2a1a72247901fbc34e40a29ed96f186a1c473b03ea6e12bbcd6a6b26eb1a9","sha512":"9d7724a3d1b68f7e63e30d4f08e318b348758dd8188ffbe777b392776095d1c50e6014935b89858fcd32596ccdeebad33b62b58371d006f8c29a11d523f56aac","ssdeep":"","tlshash":"ed2119cfb4a1b79c3d8045432ad8fad3f96088696522257b0c03fc294186a7c44860fb","first_seen":"2026-06-06T07:56:52.680818Z","last_seen":"2026-06-29T09:08:44.78715Z","times_seen":140,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/widget2.php","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.455Z","timestamp":1782716093455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fkupon.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 07:26:04 GMT","end":"Mon, 31 Aug 2026 07:26:03 GMT"},"fingerprint":{"sha1":"5A:FE:38:7D:07:E7:48:A2:96:DE:72:83:0F:50:20:D8:64:B3:74:98","sha256":"A1:7C:D5:A2:16:8D:92:41:D9:2D:56:44:94:49:4D:1A:72:2B:CB:60:DE:83:9A:8C:E2:28:02:A4:8F:7F:C0:F7"}}},"request":{"raw":"GET /widget2.php HTTP/1.1\r\nHost: fkupon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:55:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q890tQbT0qt21243HFSNuNEcDRENGqUNRlIcoOk1b2xiRt3hSra78z2vaWsTg3kZ7yhqiBUvc%2FKvmilvh4OWNAV0101jgUw2y8C8q131ElcBRS7I3JEAVpNrAHYq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a13305e848bf56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":15810,"size_decoded":5448,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"463b1f954e94aa48697c70a038361581","sha1":"875da38c1a46dd8656b27470d3a911ba448097c2","sha256":"21ce9d135b5a0b9044d27747c8896ee55b30e75a8113510dd69db75783681ba4","sha512":"41f7aa0f9377674b936620ed1a803d90034bdba74da2f8f78bed813f5c601bdf6ca61b6dedb526617c098301b8629d2c344996c065fa2727b48dc90137724cd0","ssdeep":"384:+uUAyLG/PICPE81sPhfzB8sYhJQey63ew:+JE6NzB8sYhJQey1w","tlshash":"f2629265d903146a693251589f27450dfba682038703571abffea0d92ff09ebc229fdc","first_seen":"2026-05-04T07:28:25.423462Z","last_seen":"2026-06-29T09:08:44.851011Z","times_seen":593,"resource_available":false,"data":null}},"time_used":6812,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":387,"receive":0,"ssl":6421},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.148Z","timestamp":1782716092148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //interactive-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=4064\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=q1d9_2CSenWVKaABDWuYjMB1O3WK__HWYnppPA4aFkY-1782716092.1523108-1.0.1.1-jMml1i.IL2eY4EmBAueLcw0BY8LF7YPZW2cvp3UDlIrgvUsdHEAFs81zpDCw6JcVCO_e8R_UFukz1dNgY3hXojTL6D3yzuzdlr_8HYJEgxODRdJPvI.6lon.ePnJdqPj; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 6182\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7fdf223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":1940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.783087Z","times_seen":3371,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/css/old/variable.css","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.979Z","timestamp":1782716091979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /css/old/variable.css HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:51 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A2QtaLLOraWEEtNZFS%2BDPB%2FlzXkw3%2Bxc4klvfodELxjgooMnkXJuwzbxZ1s3CYduqGlISQLrX7SsxOBIvfTCKb%2FNbFi%2FFeFllJ0ppNsHMDUCf3Ptbl0hAOSY9%2Fvh%2FMJJRqoC\"}]}\r\ncontent-type: text/css\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b6ee4d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":1038,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ae5328ef8b69161bcfef314f9242715b","sha1":"3c738ba67d113bfd06bd99816fabcbd4af5c046f","sha256":"0201e0d85b7cd86ae9bbdfed466b52df0f3ee95d363a36cfc9630e3760554039","sha512":"592bd491ffde13970beb798f9d66be6265db0d1ea69c7d660f49dc93b675e08b506a16a266477de6154ba4e9dc9a8786b4d740b4e994a4b6cd7ef3b2e62036d1","ssdeep":"","tlshash":"24114f159097a8bc763fd5b267ea5b0be22c5d1ac80a3f4e70ec75e04ea12ac1077c64","first_seen":"2024-09-04T08:18:43Z","last_seen":"2026-06-29T09:08:44.819738Z","times_seen":2674,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hab.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.057Z","timestamp":1782716092057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-hab.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1888\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=wtgoC5ax7FA_6RF1.Zv8WG.IW6z._y5wFWnvaG7XNHA-1782716092.0599592-1.0.1.1-gPWUXYDfzhBwGxiUsmlFNFz5G7uAW7X2RjAXp0lOpYR41BQc5oVBZNqa4sFbF.PTjXR0Vd9Nk0_wXqLNV1qyPWyk3BuEKVQgbiA935zWZRLHQZ8itLux82XSV7kkhBWS; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=5768\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2675\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b75c3e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1888,"size_decoded":2736,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"158c1eeabbd166126f46035ec5e6d457","sha1":"83fa7159d10da9989fc9853ee6f96ab57b065e83","sha256":"11bd40a973e0e088856ced2e923bb0badeb4291c9ea0d11386d9a469817eeda0","sha512":"457d8ae758976d87cfed9c13e6911a874d712790eea76995846aa183aca261c1bd7b0fb5436cc168e665ef490ce7cc2a36a3dc58ff2c1e263c7e511c885320c3","ssdeep":"","tlshash":"ed413b6071c9712115b952b2d860a7ef0e34f77d7209ab714686208d63131c69366150","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.800593Z","times_seen":3372,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans+Flex:wght@400;600;700;800\u0026family=Bebas+Neue\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fkupon.com/widget2.php","date":"2026-06-29T06:55:00.360Z","timestamp":1782716100360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Google+Sans+Flex:wght@400;600;700;800\u0026family=Bebas+Neue\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fkupon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 06:55:00 GMT\r\ndate: Mon, 29 Jun 2026 06:55:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30124,"size_decoded":2839,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4ade4817c094d01f291041d9e0d71544","sha1":"4fa70f752644888a716104018b14560d22671dd5","sha256":"93d74065a2667811de2ea663e8c7b8dac47c505ece8676bd89292b17f2b32eca","sha512":"e8e40377ff40a2da89656d3ec5b5543738082ab1743bb5b47731d35df05d99fc85af06218a716921afe6497c2b115fa73c9e66b205ba7cdbe0fce49eed5821a1","ssdeep":"384:x5OwE70qY942GyuoEeXcKE16qY9q2wyu2q8CBnEmZqY9T29yuN99V6ME/AqY902m:pDOA/sxVVsjy3","tlshash":"e4d251e191178054ab5759d233dd3e26ec0e42427600e13d6bfe0b0fadcaea661f53ad","first_seen":"2026-05-22T23:49:57.319422Z","last_seen":"2026-06-29T09:08:44.784123Z","times_seen":384,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.050Z","timestamp":1782716092050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-pg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1740\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jun 2021 09:18:38 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=5084\r\npriority: u=4,i\r\nset-cookie: __cf_bm=grvih2dc9DV72LXanNOLOiJAm3LkV9utEKaWQKfToLM-1782716092.0518107-1.0.1.1-UEJXtHiU093yp7CS37ra_U9zO.zzO.HdiUXCBX25BgnqVfZVpArlbC0PYv2FJxEvFK4AecVfFsbuRbtbvD.gyewOAhZvhedaTtWbiYQiY.KAs1.dvWfNmsP62xBdWINV; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 2946\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b75c1923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1740,"size_decoded":2588,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86ec152055228538f1a8f8943f179a97","sha1":"ef30830c693272695c7cf5f2ac12679c75a2db18","sha256":"a643c08a5d025958c4499731c62c3cc78663aa9c6bd2d567bbff38b4637b339b","sha512":"ae8080c64346011e314aff414514dffd14595c410f86ba018ef5da16cab2b1239b89a4b788dc24e9bffdc15d9d2679bb5753b420a0ed1bff138812ec744933df","ssdeep":"","tlshash":"09314d80628b9b5606fc60710230a4725d006ccc13f84a858d72af973147eb7ef9484b","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.795175Z","times_seen":3373,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Norway.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.772Z","timestamp":1782716092772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Norway.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4132\r\nlast-modified: Wed, 02 Aug 2023 14:51:42 GMT\r\naccept-ranges: bytes\r\netag: \"0136dd950c5d91:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=7160\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5qOp%2B3KATnfZOyswT2vnF6Dm7u7YYxuqEDY%2FFgHNi%2Bml0KRHmtrMlIRBasUteDNA8lolwh1opUMzIrQOte1GqZbBYMuT45c7dPwOIOkoq2NSlB4xo%2BI5LWZy010U2tXbQqrnmA%3D%3D\"}]}\r\nvary: accept, accept-encoding\r\nage: 369046\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=BYDVt.7C2YDL8s5Fmqt6ouzgEoWrkxu_c8kaS3i8mmA-1782716092.7733645-1.0.1.1-WXunwnjBeuTkAEor2Oi2oYjG5j2YCJ2we3dxv5uzd20M7kERSfYgGFUotHZpdFFeH4DrCqVqztzY.zFAkNThsWZwxGzKTxIXIt1HqVh4MwyA.gtZl20SZb4XWT2jIb74; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bbd99a8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4132,"size_decoded":5332,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42867aa345270fab43e1e0b774bb1efc","sha1":"b4d61cb8c4a289985f600730701d7d45729d6cb8","sha256":"3741cc55b80b07c7c3aec19306741971eff348e01e0a66d69c5db4bd906a4d72","sha512":"001fd4de88f584c5be2b3ec3f2d3cd14614c4e958a73ae39b8eb9b73e6794cdc650fbf937f21b54550725ddf5f15f87a8f911c77a645bc01f8deb6cc76576dcc","ssdeep":"96:s1ET6QM52e32zz9oa9/ViyLUBwAlAS+XIpe+DO1UxP0J3/pNl:sGTxO3i3xtLgJux+MJPDl","tlshash":"eb819e40bd01139dcb3dd1ae32f2b6600a36956b6d9c6dd184cff80b98f6112c423be6","first_seen":"2026-06-14T19:29:30.781929Z","last_seen":"2026-06-29T09:08:44.812371Z","times_seen":96,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/css/old/dark.css","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.981Z","timestamp":1782716091981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /css/old/dark.css HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:51 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWCBoJwZDFesh032QAWrh6WEF7RV6ritdnIw%2BJAFhmPfJ2AiIBR3e35ukV%2FlUHk0liI1d90KjIAzSbzCwSMsfDp7JzQteveUfofBzWZjGxEh6S0Es4654ZRVKK9XUZOhoBdO\"}]}\r\ncontent-type: text/css\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b6ee4e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":963,"size_decoded":1051,"mime_type":"text/css","magic":"ASCII text","md5":"86d17c83b9f26e4e35110e1fa926122b","sha1":"4959ca9d6a847e49bc7ae81a92e7ff54e838dc99","sha256":"def6cdc4916ce9b9b2c47692138560782cb330f9aee6894243988858624180db","sha512":"f948d9bb182d8f2c5b84a2389c750129e97c073885cbc80218bae04dd1ae8bb0e2f40acf333877006aed6802d76433f22ffab13a64b5ff930327a7b12aeae774","ssdeep":"","tlshash":"f411bd79805f543a323fd8ea37dfe93ba270a85bc003ff15b6d470866f00298a222402","first_seen":"2023-04-27T11:32:09Z","last_seen":"2026-06-29T09:08:44.854446Z","times_seen":2200,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-ion.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.110Z","timestamp":1782716092110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-ion.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2434\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jun 2020 07:51:41 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=w37S6g7zdRiKDLaObw5ddDDvFoGfh6hfDX5JFD8dVtE-1782716092.112071-1.0.1.1-baNbnmHfrOwjEQO.rdXXrqvEj3UcFnt79WDi.Sy.3bavijIqGSlMZ99AYRSCDOkm_72WlZIMAUz95ZGPqZ0UpEVk7k2wx5wB.tNHr.5ZUGkF6f.LpoRGMJy_jrK3ECBS; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=6674\r\nvary: accept, accept-encoding\r\nage: 6319\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7bd4523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2434,"size_decoded":3281,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a48e4a72414e5587b22eb4ac4ae959b","sha1":"a3ac92a04917abab71a98503dcfff52be3af7cdb","sha256":"e48ccb777ed57ca1eee701da53a8fa2d85b64639d0b8210e3160678e1753b144","sha512":"5310124afeb9ff22ed40757c3612d38a85cc104962992a003f0d26e1565d7d1db3ca16be7f898b4634f3c8c0c611ac5198cc3b1a5e1b2a5adaa2212e17f93b93","ssdeep":"","tlshash":"b3413b6c6fd4525dffa807430e46e385a2091d61c82b3a5c01a200a72113183f9fc82b","first_seen":"2023-05-01T19:31:55Z","last_seen":"2026-06-29T09:08:44.832404Z","times_seen":3368,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/lottery.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.208Z","timestamp":1782716092208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icons/lottery.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 954\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=4258\r\nset-cookie: __cf_bm=Cx402_ibySTGhd0rkCX0Szhdq_3GmamB444s6hMvOMM-1782716092.2098508-1.0.1.1-kKBZyLAJttAOzGRrCCKqxmdY.d1cgj0PkTom_3v7AUuaj5tayNAz2J62ClBpddCMaYLJZtBRvv.G7YCZWxdd543uGnUwYoyftTheL3LanMeecbJXW3lgPKAUWW3Zrk8y; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 6936\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b84ec123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":954,"size_decoded":1801,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15c0c4be6639d6ec9ce5ddc983f2c4f3","sha1":"9e541e491ca202d9d0aa9e0b61d01198eccc9eb7","sha256":"61a773aa166745eb9f86d91f71494d72866355dc9d1994d3bfa7ed76a75a183d","sha512":"715c171b747e44b894b63e9c97688a0d2f85d3dad63ed25bf019fc59cb987d7d25b35452b974221358a6f6663ae284823b933a61bac6bdc9fcd115734bee9e29","ssdeep":"","tlshash":"0e11c85683756942f06f7942fd6c932848b4dc147247d4a79bc2060bb1fc2dca301578","first_seen":"2025-11-19T10:28:57.308418Z","last_seen":"2026-06-29T09:08:44.821399Z","times_seen":1782,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-SlidesMobile-20260603213616.gif","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.622Z","timestamp":1782716092622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-SlidesMobile-20260603213616.gif HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Jun 2026 14:36:16 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X3S7Ci9y09%2FvwRYgjvW8yVkE8d8ugyNAAedbQnyBSLYgtYLHhZKFsKiw3kuRIj9KvNXZKW%2FCwM4X2yagrzOJt3S%2FllbdrX2%2FcVCDyO8UtQusNo7vcrs6Twv5LqHgnnVi%2BVcQ\"}]}\r\ncontent-type: image/gif\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 430633\r\ncf-ray: a13305baee8d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430633,"size_decoded":431311,"mime_type":"image/gif","magic":"GIF image data, version 89a, 600 x 200","md5":"4ab5f88a865f7a3fe480feaf50fe2382","sha1":"dd26f314c0709576c61a971151dd1f3c044c8709","sha256":"9b384ab4b8e6bad7a5aaf4462b791ea069913cc8b6e8367a7e93fbdc0d985145","sha512":"7cfaa3a481d8dc3743a99e9c011f888a0aa3a1cb6e96a1aba49731fb62e47a0296381eed0f7ff03acf823fe9cede0ed489fb1de6e4f81ae121dc1d6cca0669d5","ssdeep":"12288:/opSMTu8EWWkkY9DstAm+I+SVoJgCM6pOTMvi:RfY9Ds8ooi5oHi","tlshash":"57942388c418a948b2017afd6592f5851b3743665dba6cb0b53fdad3e120e9fd0edf08","first_seen":"2026-06-28T10:54:45.4868Z","last_seen":"2026-06-29T06:55:32.41386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-tf.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.127Z","timestamp":1782716092127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //sport-tf.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1148\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 05:12:11 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2565\r\nset-cookie: __cf_bm=FHb7jjDYy0atvINr.FJc4qnL3vh52Bhge.wysHgGqJk-1782716092.1297119-1.0.1.1-p4O33SlmbPqcatM23dmj7TBXgsMvJo8ZvhO5u1cNobN3gtO97E5Nkxaj4rLWcFePlv0swiDe741USeccLESiygW6y2GVSp8u43Vx8FdMMsW48PTIwEYgrEsFFwkL9NuP; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 6912\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7cd8a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1148,"size_decoded":1996,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc4fa9cc349b0cf768f45038d1246f19","sha1":"f85ab86fb81b010f37a04bc8f682fc3e85a3f7ea","sha256":"68baa1f93a0fe9e1e20f86d5793025f920a15bd1631e47abd62fa9e86a8372b2","sha512":"788a16cfd6ec571fa54b6b4c40e92e34a6a9c31e26dfc0a5a74be8737e5a5bd2d53e64209ab98ab06b4f07310cb4939944a91543025b735b5fb30b951fa97768","ssdeep":"","tlshash":"9621a7de2384721c89e178fcc241e538516ace87e5473a30d54b2850a5632936d6dbe5","first_seen":"2023-06-09T18:38:01Z","last_seen":"2026-06-29T09:08:44.837599Z","times_seen":3341,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Bosnia-Herzegovina.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.823Z","timestamp":1782716092823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Bosnia-Herzegovina.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nlast-modified: Tue, 22 Aug 2023 09:10:23 GMT\r\naccept-ranges: bytes\r\netag: \"eb35c77bd8d4d91:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncf-polished: ok, orig_size=1294\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aa6AX01%2BeEesr%2F9gkGd3FYoe8AarwFRZyS538ixBrd%2FpOBEPdIF7B9dCGn9KVPQMcjRd7lZvB83SYL6%2BWFKXCYKwNhtTHBLaUQ%2FEyW1zWY1xs6s9vbChwW58k9Rl0oiAb8vHjQ%3D%3D\"}]}\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 202;u=4;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 102326\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=e7mW7eVBk.9gttINJpKBXAk2G2SH71Zi4tEdLqkfOMU-1782716092.8246481-1.0.1.1-Nrv3Qr0aSo7stESrT8wgvqhKZ.2hn_SiVH.0C9wHrQk6EgIrrX5KDIWmF0IGdWwVKF0Nwhd1R9az8uUeQzwpPkyza026H.9aGVVGKMP6MxjN3aPKM_T2_bQnN1BNr3NF; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc2ae48be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":486,"size_decoded":1701,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7803b4fba252532df3074e3f01a73dc9","sha1":"c96ff4476cc040c6b8fe3d8dc41cc6652ded7ec4","sha256":"1848211d127d3448b1a7159db27d1d06f6c7f5f7f01d2192ab3c6a2ba2d30e11","sha512":"4aee464b3b84ff8be3dd618242bf25a467a0222663bef9a0e21f8c8fadde9b5789e1d2df3db7bd704336767254bafbee492ea4fefd247d5df9c29ea6ea06b590","ssdeep":"","tlshash":"7af0541035dc07c69099cc3069b62bea253bdb097f3a970fb0d499e46a3c4ddba4942f","first_seen":"2025-05-14T16:18:22.756501Z","last_seen":"2026-06-29T09:08:44.789262Z","times_seen":61,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-opus.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.117Z","timestamp":1782716092117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-opus.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1330\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Aug 2022 10:55:33 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=dCV04EfwrZQgh4.gQdV8FPOdLxteENq7vAyC9VD2w0A-1782716092.1186976-1.0.1.1-M1mUph12ekYQCMPNWa0gLfGPzYfObqajNCChh_eleRdYYVfgMsniCAyYYMlSGSPgB5mVhZx3Ka8uvZ56VN16T41m4BeQFmGFPB2EG98BzL7UvAWSxHiEjzqYBQPRf5SK; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=4303\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2741\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7bd6423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1330,"size_decoded":2178,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff58f7baf1903414b9e121fa194c01a0","sha1":"9686d2811e39d923e00d3573d187e84dda29fdba","sha256":"d68d2439ada8dcdb278433a33da32e2659f34ce90cc7c9023180bbd3dd92f54a","sha512":"a83b25ce5d697a2912ce51e8edd60e1d9f1385f2b85dfc10e69ae3b3bb006c8816d3cefb0e85846a85644b6e5d65ec4cc372f2383971d8ee9fdd4a9792ad0701","ssdeep":"","tlshash":"8221c874dbd1c52db42875508b966070006d50a63947e7603fa39f7d12920f547ff24f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.847415Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/style.css","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.984Z","timestamp":1782716091984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icomoon/style.css HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 488\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 08:02:27 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\nage: 5480\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=sqQ2N.eIaxQnaKaVk_9.ZeZoLPJZYE1AJTqAOtaauQA-1782716092.0226202-1.0.1.1-pTDSjxF.7R_JilyMm1vxiEAUSc0P733jZMCFXjnCnW2Q1RcgOpDZcqlCOg2hBa0eL292t4YywMXtSdl_s.SU1c7kc.eY4vUuzMEQWU6T7q33pflkafH7USsA1arxEyYH; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305b72b8623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1247,"size_decoded":1306,"mime_type":"text/css","magic":"ASCII text","md5":"fd841219e646258717d8c8c5ee8e1645","sha1":"3b11bf2731abad4ee4b4ed81923025aeee1779a9","sha256":"bd964175c358da3b2151572737f09a8b9b7a180b482ec1b379be8f05a23cfe81","sha512":"7854a76358116fb5eec3fde344bdafa933b20abf93bc324a0484a07188d16624c28e4146e573eb9c6d34041c4b04718385c5d67bae6f5f7ee54ab4a1c460ffe4","ssdeep":"","tlshash":"dc216dd0ecbd2851930194c833a73a20bf0c52159c4a6c9af7ab284cfff670592d679d","first_seen":"2025-11-19T12:27:30.570223Z","last_seen":"2026-06-29T09:08:44.809075Z","times_seen":1796,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":6,"connect":30,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.051Z","timestamp":1782716092051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Apr 2023 04:57:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=OfZw3Qdf.u2ZCmB9.2hgIXRLKN6xrKPzXi4jkmB93ew-1782716092.0532744-1.0.1.1-UFzgeVf4dOQYlT0Gb0kZWs4ruset7qU7GA16n8A9LZPmHHqKAdJKRtd35tiML2JjXnnk3JD3o.co8vSRq1rpKLc3d5I.ZLoPULCPHG8HcRfFYSIRmlTpV4uQ3e2WicgT; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=3284\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2121\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b75c2223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":2440,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.839232Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.084Z","timestamp":1782716092084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Mar 2022 06:24:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=rqI4rFE7FKQY396T1XU1qHzRkVuo9bcR9Th.5AKD77I-1782716092.085927-1.0.1.1-EF5trfBga5sAg8tHfKCe.0n09qLh0yInO2DOqCpTyd7n58Qk.CDB9TzIjf1VI7CGdTtcVMATHy02.shSCv728JCmvEHZH.mHi3ka1sbJ0dQLbN1yWwQbPqziGlJSC.lF; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=4064\r\nvary: accept, accept-encoding\r\nage: 5752\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b78ccc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":1939,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.783087Z","times_seen":3371,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mgw.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.053Z","timestamp":1782716092053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-mgw.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2760\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Apr 2026 05:25:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=lStXFV40qxRxQrzVSTPugiThzm6kXjyHErL3MCY078Q-1782716092.0547125-1.0.1.1-mTNlkKdx2qlZkf1eUA0xjmuRL.pNy6OvSSBld_6FNkNBdBZS918HqxA0BIFmfeGf3xwDZOvZF.nqjBKfyGnduLGpIM74db0ZrTjTVX5PNfPYAaIBYGwjUrM3l2HtkyEr; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=6390\r\nvary: accept, accept-encoding\r\nage: 5506\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b75c2423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2760,"size_decoded":3608,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27c51dc9274ae15801f9fa1e32b892cf","sha1":"7c89550560e339509024dd387d282d66d38d3e67","sha256":"8c1188260ef9e4c09bb098f524821fa3d71b61203c9ade6fbc2dfcfd48cf6385","sha512":"9ad4b877d17cccd0436970332fdf02398f7bd72b8430926235bfcdfb8c24e6c04ba0566d40920051b6ac447d3091ed31aa9db10a2d48b09fb1840b0a937e3a95","ssdeep":"","tlshash":"65516ea2b838f8c2d881aa1752c03701e50fdd3f49050cb36271a11f7b1d3658d5a927","first_seen":"2026-04-27T12:37:02.079089Z","last_seen":"2026-06-29T09:08:44.816554Z","times_seen":763,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.973Z","timestamp":1782716091973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 12963\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"17579-AwBvMnkuAzSX6cpoNztsM4YwWTM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230084-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 3839060\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmNceuGC%2FulNk%2BkuKCS84n6lVl5GV8jbF3fmiSICli%2BWprBR%2B7L%2Fph67NuqzehzCjr%2BwWvAuRgtDRCWe8fBmbi%2BzcILjkuVHBzp7MgYVtVfozvDEMiLOBFZ9yTdDeMUbozk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a13305b839ab4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95609,"size_decoded":14101,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06cb502613f99040e534fec65fa725c7","sha1":"03006f32792e033497e9ca68373b6c3386305933","sha256":"e1172d3a0a208cf01dc066f0abeaf17f00264a966159a69f71947d6edcd4935f","sha512":"734faf4aff6d9c64b87f3c1320114f71d099d10c0ff9a4de3ef65e009918a5b8faecabd0e7e56b2630e1de58a5e3c2c82c9c6120241feba750f2dfc12723a8fe","ssdeep":"768:+qnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8IbgFVyMW:7Oocm4FuwZ5ijINRDl8Sb","tlshash":"9793feba914f05f9d341e4d92743634693aab93cd1813c7ad342399ee3c5a1c8ad72ec","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-06-29T09:08:44.78159Z","times_seen":6492,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":6,"receive":2,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/otjuijet2025/slot88ku/user.json","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.618Z","timestamp":1782716093618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/otjuijet2025/slot88ku/user.json HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 869\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"1134-4m92e6yPZDxRnHkLz2iSCiiq0CM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230106-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 36279\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LehQxkOuP%2BUD0GOfvoqno7Ib1MWAZO5HThoAkjiXc9Zi64JWrc3Gq9PhxoJNrJA1GcLdKKXreFzSjyWca017%2F%2FpWkDFzFMeYuE9AZ%2BzDRky9mtEvxlReZwfcOaAf3nRB14%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a13305c11dd34c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4404,"size_decoded":1985,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26b8607097f2cf384829e1e708ac3571","sha1":"e26f767bac8f643c519c790bcf68920a28aad023","sha256":"3ab50d3f9140e403bf4c7d67bc48022a467f2a2d4a9ef4d7e0c160768f4c4f5b","sha512":"85bd3b87ec23602dfa768f6a878c170f463e8618a73e1b9e18cbedc00e12aff1a9223a0da16d995420ef85e29dfba58b9e603e0cc2f84e3e6b0dd6740fad39c4","ssdeep":"48:DNFHQ4JnUSxG8oPMZPN7yHQm3kZWFCJhtWHga33TnJR+Plpb4JrAf7b0Bbg:BK98KQV5ZcCEDQvaCN","tlshash":"5491a44e0e8b86fc38d9fe434783b27b659f75702706093358b9f628562a068b534f31","first_seen":"2024-04-14T16:22:27Z","last_seen":"2026-06-29T07:01:41.274634Z","times_seen":516,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/favicon.png","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.946Z","timestamp":1782716093946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:53 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jan 2023 02:44:16 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8P%2FSkns%2FWJHz%2FidrXHGUSG1LC2%2FF4%2FiZurznFp3CWHOJoQFw53SSqA2YuGWfXXOImX1Zy4eCYRCsP4OnarHsUCVVBVtU0akx0s02p7IkMpIilPFcFL9XXMyJuLB%2Fj9zMbDv\"}]}\r\ncontent-type: image/png\r\nage: 674\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 72231\r\ncf-ray: a13305c32ed65690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72231,"size_decoded":72913,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"df4fe17c35885b4c3ee31f0a5ad5eb18","sha1":"97dededf1399b6712460b660ba8009e141f204e5","sha256":"a90c51b1bcd819981fc9641130e3c1b1e7e831b07c0fb6fb8381402e0a8f4b2f","sha512":"3d3f00af265dd0532c12d6e32c8bd144e5d388d76715aad19a680e7c3547154902f07600c3e8f7cbd5b767e9a3d0b7865ffe4509e40460f80c46bb15bc7041a0","ssdeep":"1536:uV829u8MRxzyxtMbHMM9xqPGvr7CShAp9bvkFSouW:INtuxzH7MM9xqPGrG/JcS9W","tlshash":"e8630118fd78ee20a8d2fd0b19de219050365cd2e8d694877c5e5f8b1f696096f2b0cd","first_seen":"2025-05-28T13:20:26.416853Z","last_seen":"2026-06-29T07:01:41.218418Z","times_seen":136,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Paraguay.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.672Z","timestamp":1782716092672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Paraguay.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2478\r\nlast-modified: Wed, 10 Jun 2026 17:38:43 GMT\r\naccept-ranges: bytes\r\netag: \"626849fbfff8dc1:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\npriority: u=4;i=?0,cf-chb=(37;u=4;i 889;u=5;i=?0)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Id3dskhJrSX%2BnsZoH%2BREpoLDNLfJj7RuSCVbe3uDKc055aUT8xqwbimp5Ww%2BzG5rHfTH23o3IwpRoTirh1zLRWb7yF6YzjIOQ9P%2BcvHEBjh%2FN5M%2FZC%2Fi4NkF9si%2FlhlRaDtX%2Fw%3D%3D\"}]}\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=3258\r\nvary: accept, accept-encoding\r\nage: 84476\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=GGVyqtawzJvqpXqpAQGwSHbpZ10ZjeZ_REJpfbxVmH0-1782716092.6911302-1.0.1.1-CjOZmqxOCqcqOQxK_AG0cpp_2zB5CGh6dz.QrBbphP2Hke_JMhgNck1iPb.XOrrLQkiW6.4tOYWTnwD_q1.ofoSyAzKkasS2UustGG8dIzzVgCIomTD2s4OWWqAbLpHL; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bb5ffd8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2478,"size_decoded":3698,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9686cb1fdac5093701fc5806264baff2","sha1":"e16ea0b2328982e6063ed2a55270c793ee3b7055","sha256":"f9c75ec575ce5e115694341cd200b64f1c36a18413770c5b2dd36c72f8444316","sha512":"ef50aeddd4581cc12b2392fae38ffd48f01e07e2852dce1bab75019bdee2f937843a685a290be2bc4188132b94e7971e74a2e5639b99cabac3a50ccfaef319e6","ssdeep":"","tlshash":"88515b42d27e4e47292b28b5e693e7e0e16995cfa0c033f1edc4b23729f1848c83101c","first_seen":"2026-06-10T22:17:35.723734Z","last_seen":"2026-06-29T09:08:44.826744Z","times_seen":67,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":6,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-ps.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.089Z","timestamp":1782716092089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-ps.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1530\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Jul 2023 10:40:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2835\r\nset-cookie: __cf_bm=Stxui2FmFpGA9b0Ymi4Gz_FOVqS_cnTF3qyG8_.PN.4-1782716092.091325-1.0.1.1-AP_nSSwplyFDBrAQ9d.44Ys5ZPm71Fy8GYNIhFvo4Aan3fdPPsrHF77ivlRAxeCIxYE.OzIgiUslMH0UmbAZu5DvrpZ5iB3r5lXzO3qanB4w6.nSToHwa90tpg4vzpo3; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 449\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b79ce823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1530,"size_decoded":2376,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df12aa9d7e1aeea72834c560830ceb62","sha1":"de28dd2fbd5adab2e42c9ece29a5c259b4c52603","sha256":"0b474e2e391432c75c0f69f94d6a8107472863c03b441cdbab7cdffe483f6b79","sha512":"2d0dd11d755346446888a97065972b9dab95c89e033152cc11fca53eba1895e3be39c01c4b8ab49b418ddaf3aefc0fb279b06a213b355d9d22088d675fcb1097","ssdeep":"","tlshash":"6131291819cfbd715903742c3e59b404133a2f8ebd31e7b0eade277991ec88001e6d85","first_seen":"2023-07-01T17:54:16Z","last_seen":"2026-06-29T09:08:44.856Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/js/old/jquery-3.6.4.min.js","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.988Z","timestamp":1782716091988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /js/old/jquery-3.6.4.min.js HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQdeFL3h6%2FyRs7dVm9MhDka5w3T6TdPZE%2FuFy9vo%2BGiIa9vBfUkOhp7f7A8W01ZvaK4bIJUvmiQp7WdckmbiCJ10IumQnbqlyeWes%2FJ1q%2BC13%2FEuDJvDgGk%2B7SnGQQHQKO8Q\"}]}\r\ncontent-type: text/javascript\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b6fe515690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89795,"size_decoded":33602,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-06-29T09:08:44.782103Z","times_seen":3720,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/mgl-25.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.610Z","timestamp":1782716092610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET /banner/mgl-25.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: __cf_bm=mjOAZNCEoaPgXFbyiO.xKrw5HWUXxVJ3exDsIQmPilo-1782716092.1234186-1.0.1.1-FxQv9gdw9pJfQTDJZerAdNCO26wP3JPkcVp.L5GqkPefuvumpZFXvxZVXuZexC2Gc0gJmrKWobRdBt3dcRZyPMn74PzgJ37vPgr1iHTlc7q5dUCvBVelRceKsU2o2Nwj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 405699\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Jun 2026 06:16:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: webp_bigger\r\nvary: accept-encoding\r\npriority: u=1,i\r\nage: 6150\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305baddec23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":405699,"size_decoded":406207,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1900x380, components 3","md5":"4170086f82b7df6c4f4f16647a965f59","sha1":"80059f21f5c5410cd99b9ef3ac8b3367d215c673","sha256":"81a15f6f4a7dfbe51e16674c2f0fd35cf2cac8f31b5755d259ab26eda45234ad","sha512":"bad37082e17f29fb46a2111d579519cec0b7c161960926039378c216f018f5d35964b4113f5b6da8d262019ba6f04385add7380be2f6670792942c1840eeffad","ssdeep":"12288:Sw0o5RbSiiG2rmgSpKPenIKpkTHfjnN5D:S34iG2appK2nhyHbDD","tlshash":"3a8423c1d96fac26d4ff391068a0e7374a965e7f0ecbb2d25cd481782ea46cc47b1660","first_seen":"2026-06-01T07:46:01.91984Z","last_seen":"2026-06-29T09:08:44.785072Z","times_seen":273,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.220Z","timestamp":1782716092220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24077\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"13ac2-jNeXExg3GrPRY3nfbPslSlxkn8o\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230193-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3896436\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wtpQPeO91PMRixBAT0Heibr9meBfCTyKhHPiHoiqc9ide45r3FyCN0ncPgBqHFQh6o%2BOjQLgsxxNrc02Dc9KhrHt1unAuruQDXI5dfYAQhjIvOamc7MYSE84j8uOLwefKn8%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a13305b86e690daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80578,"size_decoded":25196,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65292)","md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-06-29T09:08:44.823606Z","times_seen":5532,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/guidelines.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.854Z","timestamp":1782716092854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET /assets/guidelines.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: __cf_bm=4p0jawQx7umM3WbBJBRlnV8TSlMFI57hmZxiXwNgh1c-1782716092.2025006-1.0.1.1-Lq3pNHVWIKa0sRUuiGRNWz1GzSlkQbqIqjlPwB8.X7.szBVJQ3x9ZYtTPcBKfQCHCzedMG43i6hWeGub7BeJxg.zxglhgvCW6Ye9396Q6.bLJU6ONAIT0xIo_8WAgVhx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5688\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 11:04:58 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=11637\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 6536\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305bc59de23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5688,"size_decoded":6210,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27c7481d5a81d1ffa560cd5fd38d40c6","sha1":"b0f1278c93a08d9a83a0817f96ed4df81db4321b","sha256":"ecb550035fc18ec3d65ab4009346a27e06a68d0579b4e06ff17fd18f95a2c1b1","sha512":"eb8bee706d476461c96adc6517245a39a1bc5f1e25eb0d9f48496852b4a550f70bd7a0be4521ec7c6927863549136e58d3cd48f9d35ec7af411153c0bc12b2b3","ssdeep":"96:PWSw6RKoMSmUxkDYGlhbnSTKFVBc2r4tplUI/v6AizeXQQ3FUjKd:Pnw6RKZSpax3jjLc/tp9/+ggjW","tlshash":"68c19f7345fe36881c34b551c9fd24fd4e40242c42d2af3268c34a56999cf07e353ac8","first_seen":"2025-11-19T10:28:57.315993Z","last_seen":"2026-06-29T09:08:44.802181Z","times_seen":1425,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.142Z","timestamp":1782716092142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //interactive-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:22:20 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2903\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=W0cK61m1lmxWXikCBzB0pHPIPF5I_tGbLtB1KTlo9WE-1782716092.1510754-1.0.1.1-YxgS2PyRipM9xjOn17rCxO.ZcFo4pavuQAXyxt.2BTdb4BjI9RoKfeY9OgapPslo5XE8B4KlBnMSTTQSZnuMtfYoTk8s5rR84AuU51vS_Q5y68XebGuBYfjwY6Y1Wynw; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 5732\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7fde923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1564,"size_decoded":2412,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-06-29T09:08:44.772249Z","times_seen":3307,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.145Z","timestamp":1782716092145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //interactive-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:26 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=3284\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=T0ozLSRjfTSD4rSteDBaMomExTXC57KFjjl9eYK87mA-1782716092.1517296-1.0.1.1-IPa_19Wr6tP47weIHtPWgIlIFY_7IPhsFnSaYrNIq6m6qvKhZ29g9vSpWIn7cJMbYbVuM1vWBA1ny83sHs9No0N4S0VAkzB0oQ.sMOP7.EtAahjNRImW6vjWZ3NqSlzL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 6319\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7fdec23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":2440,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.839232Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/USA.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.821Z","timestamp":1782716092821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/USA.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2524\r\nlast-modified: Fri, 09 Sep 2022 06:19:10 GMT\r\naccept-ranges: bytes\r\netag: \"03ba1214c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 327;u=5;i=?0)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qjnbv2S7wj0bBSYP4qhF1xybYGWR2k1wzKzN0SBQeE2%2FgXSsJtio%2Frw8QSzOC2ZKSZrJ19RgPATKvuA0Nm%2BByw%2BIz8%2BMgS%2FHBfUOngJulO5molhz%2FDb13%2BRoxA93tAAHs9qERA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=2863\r\nvary: accept, accept-encoding\r\nage: 102326\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=tJE_WwuRYJoGS4I9z0K_0cxulmFvGm3WAu4qAlUJKzM-1782716092.8224788-1.0.1.1-rSl9U0_Rn3yulOtPGEZnCQo8v.DglDaScrgPglOLKNIEqNZVZF3OXcohabNF1ZptMEpsm2W3W0ODysMc5ya4InmCSzZOhaSI_.BZh069cf2hQoolxw5D7wcBD8uKXV_g; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc2ae18be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2524,"size_decoded":3744,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e6b48caa694092b264e5831f95cd8fd","sha1":"2968b17c55ff4a2e98dac564362f3eb678e59d46","sha256":"7892d14f93598ddab0ca8a411e2b7eb98faeb45d12cf8af091190f5c36df555b","sha512":"90a36005bbda8d5c770c85090928fec988a65717d1ff3156c857866db846cc385c4a617b8fec8cda2f50fdaf2869aca5af3c13389a5b2db24ff4e136a28997d2","ssdeep":"","tlshash":"68515d048027912b482b89356b49f5a7d41d60e3010373b74a8f29b5cf7d7d2cfd8a61","first_seen":"2026-06-10T22:17:35.68094Z","last_seen":"2026-06-29T09:08:44.797151Z","times_seen":62,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/css/old/new2-style.css?1782112559","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.982Z","timestamp":1782716091982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /css/old/new2-style.css?1782112559 HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:51 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 10:08:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfxyUVwzi3SWwQ0vhz25fyh9thLsDtTQE4oVIGHZg38hHJsx9nlT11pUmUK5mj78f%2BHIuCFhLzk0Efp%2BuXEaTGApfYYttREFFaFZzOBsP5eOT%2Bp0Mc1onXwFUZRXbncI7chu\"}]}\r\ncontent-type: text/css\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b6ee4f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19593,"size_decoded":5560,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"01af7e767be5b793b9def25cc5708367","sha1":"f5e928588d0ac5fc97ca65be366db7e5a6a0c375","sha256":"9ecca6a6a96bf6f13b2f733e8ee84c4f6868ecd00a76eb261133bfba42128fbe","sha512":"34ba7ffe63b61df1052c6fdfdc759abbb81b4cdd353d890f0891f449ab718be1b23c3fddf748604d0a8e4bf2f188d451888b759dcab1857e61eb2618ca852611","ssdeep":"192:WoVF+jJSouRa9q664vDL+TRl4y5UCUmQkGyMA+AHFtzTFB5SbbewonOlnUAdhwj+:Pf+gxwq6691fMcDKTVf9rA3v/JZKow","tlshash":"c392736dd512209a2633ebb4af750b19e7698023cb06626d3fdc62844ff22799161fdc","first_seen":"2025-11-19T10:28:57.246484Z","last_seen":"2026-06-29T09:08:44.776675Z","times_seen":1794,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.494Z","timestamp":1782716093494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Jun 2026 22:39:43 GMT\r\nexpires: Sun, 27 Jun 2027 22:39:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116110\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12248,"size_decoded":13061,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-06-29T10:46:07.152011Z","times_seen":12108,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.115Z","timestamp":1782716092115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Aug 2025 04:28:44 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=snUl0R3i.gE20eFov39EpVr6bJQPDnRJ6SG2u1wHOAg-1782716092.1174173-1.0.1.1-yozJHbl2sTTy6MDABYzgrXENZHllLFvMASbZDtIR2gFmL38jyL1eSMppP_OBHnFJz1bSGtKOfHjEowvdpvdIJEFLpu98k8C9eJ8tmA9FiO.2x_Xq.AfhP8IvwyU3FWt1; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2786\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 1230\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7bd5f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":2420,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-06-29T09:08:44.824751Z","times_seen":2636,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/api.php?task=getTotalPool","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fkupon.com/widget2.php","date":"2026-06-29T06:55:00.466Z","timestamp":1782716100466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fkupon.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 07:26:04 GMT","end":"Mon, 31 Aug 2026 07:26:03 GMT"},"fingerprint":{"sha1":"5A:FE:38:7D:07:E7:48:A2:96:DE:72:83:0F:50:20:D8:64:B3:74:98","sha256":"A1:7C:D5:A2:16:8D:92:41:D9:2D:56:44:94:49:4D:1A:72:2B:CB:60:DE:83:9A:8C:E2:28:02:A4:8F:7F:C0:F7"}}},"request":{"raw":"GET /api.php?task=getTotalPool HTTP/1.1\r\nHost: fkupon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fkupon.com/widget2.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:55:00 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With, SSO\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7%2Fzb4EXmXntTCcJic2HZJcaYDo7PmoO7sYiZfXgD2d4FHyMSoJSSfWw2ws60f7TnMVXoDPxitI1gU492XRBrRYgZ3kMoJr5pkw6LFT4EX2Xi2GY8RaIICAVvBEf\"}]}\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\nlast-modified: Mon, 29 Jun 2026 06:55:00 GMT\r\ncache-control: max-age=60\r\ncf-cache-status: EXPIRED\r\ncf-ray: a13305ebe9c5712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261,"size_decoded":976,"mime_type":"application/json","magic":"JSON text data","md5":"5327d745f154f79393f16ed5987edf8b","sha1":"32d1c228d7a2e62bec736936ba8a2be514565fed","sha256":"a42594f3055dc3933161c876fc8aa93273b49a363a4b7645d93b1bc1051beb3a","sha512":"b21be40468675b072422352b69aeaef9f418105010199821e50c1737165c06183dd59b22d1d8535e4ad895fdfb93c69a73e76d85c70da8676501f31cdac680c9","ssdeep":"","tlshash":"bed0a70fc4b01df3be45e8901498214c7370314308053d2636ec564c0f8c43a22aba64","first_seen":"2026-06-29T06:55:32.424139Z","last_seen":"2026-06-29T06:55:32.424139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fgs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.085Z","timestamp":1782716092085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-fgs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1160\r\nserver: cloudflare\r\nlast-modified: Wed, 10 Jun 2026 06:03:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2174\r\npriority: u=4,i\r\nset-cookie: __cf_bm=VRpInxQJSLb6A.g.oJlnlaendJJufAp3LmLCA3QmPic-1782716092.0873632-1.0.1.1-pLKiIbooXzwutxyXAKJWz4LhzI0.rZ5QkLzsOBZwrrVBY.PPFOJh1_ydBFWLFEzLr4kBjEB2aCiHi42iFVuvmp6hjEzIdAMZrvFkwbZNXcVjhwFI63RYiYczNs_Axqr4; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b78cd323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1160,"size_decoded":1997,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf3516917a4507c8f1271a6d64887581","sha1":"445a3dc425c97de5091ee32f6b4491a7dbd685bd","sha256":"2653fdba0df4df8bafe3dfed95f0e630a1509e4697e4dcfd8b84886e4b065451","sha512":"e434a6452de7ae2b02c9d734bcdf10b90b274aa7d956fb264756f2c0a97ae94ac63a46f99244c3017ffe37fb1ce454bee19f0cdc8df4309f219a0e7ea9269f07","ssdeep":"","tlshash":"e221b9d86670a1e5444f1fbac1e68d1e1114211b61738f4a36cf4c946ec1fc3bb05d9e","first_seen":"2026-06-10T22:17:35.691708Z","last_seen":"2026-06-29T09:08:44.808483Z","times_seen":187,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/m/capimg.php?5318","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.205Z","timestamp":1782716092205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /m/capimg.php?5318 HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FGeyAc%2FgtzX48T87tLIBXFJkIOnyCPqo7zVjnwN5LbyXIjBHS0QdBTbQ6iX0FkXZl38ZKLUHJrgCjgRg2Pl3fQn09YM%2B2d7lAXKvHbJPw4bEWEHGEpykTogWRu3L2FX7tYs\"}]}\r\npriority: u=5,i\r\ncontent-type: image/png\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a13305b84e5b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2775,"size_decoded":3501,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"4fd9a06f8cd6e63dabf861e2fe05e8b0","sha1":"cdb5becc9c178f455fd6b1342645c0fa02bbcc31","sha256":"574766e3d39540987c610b41a9b5ec2655bca7376662d8a82609f721d5cc5d11","sha512":"f29ab8f37a5d682cfdfafc55576806e8690da823998a6752ea7d536de98b96a819318a890f170ce9a2a0601a9c4dfbd2b11cd30bce37be52dd7a841726d43250","ssdeep":"","tlshash":"30514b430501b2ff8a2a133f9547e974b7190d9b0e01cb5908a68e81bf9ba3d2021f8b","first_seen":"2026-06-29T06:55:32.425557Z","last_seen":"2026-06-29T06:55:32.425557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/assets/hubungi.png?11","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.867Z","timestamp":1782716092867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /assets/hubungi.png?11 HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Sep 2024 03:17:07 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jpWvwaYRWHofMo67BtTiSBr%2Bw9kQWcz16xkuYgMBj8bmDe2OthCo6WsGJgj%2BPVaQG3DZ7DQS2x9EkUL0uaKDLjnRaIqf53R8truLrESgi1eIZNyosebs1AwJWIpNOzpXvsYE\"}]}\r\ncontent-type: image/png\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 6150\r\ncf-ray: a13305bc6e965690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6150,"size_decoded":6820,"mime_type":"image/png","magic":"PNG image data, 64 x 246, 8-bit/color RGBA, non-interlaced","md5":"889fc3f6fa14cbe1ea3fd8dda586bf7e","sha1":"e340f2fcee7e827285172f2120d00ad05575b31e","sha256":"e2f56e54711945f441ae0191957d648fb18fde319e9d77866db44683bcc7e2c0","sha512":"52dcf0114b46be7e51c166003ff072eb7323e9eb7f9f98980a35059b8beafa002576a471cf78d7731fe39eca43b72ea99b18d4736e47c85586b8c296245160b0","ssdeep":"96:UrjNMBOTlR7KEbZAWl5RMs7dPX5QyrXtqmg+MCoMGvhH3yfO8P5Wn:q2Ba7KUGwPPX5Bxs8P58","tlshash":"b6c19ee5d9e1a7fccd2667fc9a1b7b3a42f20a71b80fc991d36ec8519e4620c40062d3","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.778198Z","times_seen":3800,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fkupon.com/widget2.php","date":"2026-06-29T06:55:00.357Z","timestamp":1782716100357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.8/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fkupon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:55:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33048\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.8\r\nx-jsd-version-type: version\r\netag: W/\"38aaf-dXWYf3DuXJH2oOdxs4xlB+RXq2E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230212-FRA, cache-bma-essb1270068-BMA\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 3980550\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2aG7ozFw6k5ITKOkWXg2%2BPgOurWSYnSfcEBC0kt2GjijR%2B%2BKMY0d1swG6Wv0zzr4oK4u1zttZJv6S12B7ZyQs7Ll5HayVXo3vjuqCYGS5qHaIObO%2FVc7YYOK2C4BaGVRJjc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a13305eb3f214c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232111,"size_decoded":34210,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"1b1cb0e2be9a21f091a87691f20c6300","sha1":"7575987f70ee5c91f6a0e771b38c6507e457ab61","sha256":"d85327d99c7a3ee1f9b5d0500d1370acea3ad2db39c163c2f51f232baedbdede","sha512":"d9b0500a3727c3ae7c2e1a389e55c971ce96915fd4c6913fb00a246d73f140d1aa98d750ad6aadc36e8db3d90517fc86efdda9291d52c7cfd8d4b7f55cde0628","ssdeep":"1536:i9NnXGi9GfJkfvq5wlP7cQZDR9uRV982sYRElV6V6pz600I41r:EnXp9GfVV98II6V6pz600I41r","tlshash":"123482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-09-04T15:51:36.002152Z","last_seen":"2026-06-29T10:26:37.832674Z","times_seen":3720,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.121Z","timestamp":1782716092121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //sport-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Apr 2024 09:57:15 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=mjOAZNCEoaPgXFbyiO.xKrw5HWUXxVJ3exDsIQmPilo-1782716092.1234186-1.0.1.1-FxQv9gdw9pJfQTDJZerAdNCO26wP3JPkcVp.L5GqkPefuvumpZFXvxZVXuZexC2Gc0gJmrKWobRdBt3dcRZyPMn74PzgJ37vPgr1iHTlc7q5dUCvBVelRceKsU2o2Nwj; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2245\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 4307\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7cd7523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1258,"size_decoded":2106,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec313ad70ebf040f8a7f198d4b08f5fc","sha1":"6dd5e6b742b5b6f4ddfd36a56e31591702468320","sha256":"e7e3ff1ffc4a20c85261693b5e5fb017db4495990484037361699f2994938389","sha512":"d0ef2625a6b0df028d59dac949f08064bfce2f4d1d95802ad7425272d270e5c3f8afdadf031cdd3cc0018d666a91c7c8fd7483ee6dddfc906563bf2b2015fbc3","ssdeep":"","tlshash":"9321eab1c714d61df26c354c43df19445a3e9a4f6407e333ab93bf1143a03b93215552","first_seen":"2024-04-24T22:56:01Z","last_seen":"2026-06-29T09:08:44.774956Z","times_seen":3297,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/style.scss","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.975Z","timestamp":1782716091975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /style.scss HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Je3idFScKV6wU%2BwUdpte3XXHMEHflvmlBVrNw6CKymlAVr%2BfZU3MCyrXO9WM4AHbYk%2BfAKnMf7fIinWM6OgMqnWxB7y1C%2FrXPPWiGZ8%2FCIGOS3vAb35vu0UJfEczgHJhhwg5\"}]}\r\npriority: u=2,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a13305b6de4b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":734,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T10:32:18.27582Z","times_seen":16822995,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/arcade.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.214Z","timestamp":1782716092214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icons/arcade.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 350\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=3280\r\nset-cookie: __cf_bm=gvfsymL_Q8IQtfHjcOjb.mK7xSI4x.pon9DVsfcCNTw-1782716092.2159054-1.0.1.1-0MNaWKkMfOn_2xLqRmIxRYuGbQhdaeg9j.W9DeYKEAeQwD_uR2_r._AWtAhtWH0mj7RQSGnCcIE_kqWlZ96jwc.B6VFUSqkIux3IZmvlukxKk7eID7lS284AbNkdS6zE; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b85ed823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":350,"size_decoded":1186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b684e53d508cd6b31c7783bdff6cca5","sha1":"9ad973f643cc511319f32dd501539f6c223d45c2","sha256":"e5b50f69e6eea2b60cd5aaa8c79b05ed8a3846ff044ce8b9665cbfe56a821935","sha512":"9fd98539b171b98f674bfa6637ce289c851907b24447b6e964c1e9a8bc148eb2b6714446b2b2b420f75dc6f2bf18d00c675f2ee1be6747ff923d1500c24792b4","ssdeep":"","tlshash":"23e0c010ff04e6759ae728146839c95e1c008e5938c7cbd4070d06e1a1b43530b0295c","first_seen":"2025-11-19T10:28:57.335494Z","last_seen":"2026-06-29T09:08:44.794251Z","times_seen":1796,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/France.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.776Z","timestamp":1782716092776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/France.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 912\r\nlast-modified: Fri, 09 Sep 2022 06:10:23 GMT\r\naccept-ranges: bytes\r\netag: \"80319cd812c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DuNNoquvgekjSc%2BlN6tJnoOjUqzhz0MIyYpnQLQw6X0DeBQQHSxsguI2wgdI7BZyVnsvBdE%2Bv5mHqqxZW5N%2BwVsNvJvJz2Bc%2Bnre5rzmrSAmrlU0mBLC%2FFHGa2g7XRGmuFk5nQ%3D%3D\"}]}\r\ncf-polished: ok, orig_size=1149\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 192;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 113551\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=efXkFw25IdX8f_hpGnGm0HUP_QA.UcC9FkdFEsXi6UY-1782716092.777706-1.0.1.1-.fdHmZhJViRZiurrjpnpXHTgUajuWVs_spCqjFukE.9JL2OCqGWNAolinRcsyHCFhvlvtB_8Hc9c0GHP80gHkRlP0T7tE.X7UDl0EJjdGeb28DiNlWJxQgXjMpS.NLJw; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bbd9b48be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":912,"size_decoded":2126,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db7f41eb6e73f04a74726121441fde8e","sha1":"3d12c3550fd49eb6d8994ee2724ba4ee12246698","sha256":"b38528a646192da106e875b13ac62b6398aabb4a2e9e1b35d21b55e674050811","sha512":"059b39eae30dd1d217350854712b772381a64cf83e5f3c1ca51a0e20f5006a0fe97ff7b05160af90493cbc3d1c44d7eeb43ee33664008b452ae0621c9c9aaa59","ssdeep":"","tlshash":"8d11883083762c39f66f3d94d8250e290cfb3554419a52c7d29d92644455ec11f49c17","first_seen":"2025-10-08T07:48:35.861167Z","last_seen":"2026-06-29T09:08:44.794697Z","times_seen":176,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/driver.js@1.3.1/dist/driver.js.iife.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.987Z","timestamp":1782716091987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/driver.js@1.3.1/dist/driver.js.iife.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6044\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.3.1\r\nx-jsd-version-type: version\r\netag: W/\"4f62-kzzghPk0R32ZK+R2NNlbYq9mNOE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230086-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4066701\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jB2p%2BZ9LK87ppo9rzMc6G5oG%2BTenWsO4pXan8%2FKkT9xPCL9o1g4eS4b3zQsclV9c7QMIdCDZ8LFR0QgnCBPyWt5dbMGdqtmyXMP5xfOMXPJrA%2B8DEr%2Fbn%2B%2F737%2BjUFQ04Mk%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a13305b71db95ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20322,"size_decoded":7168,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16599)","md5":"6b77b834b81897997de86e6ccbc0d91d","sha1":"933ce084f934477d992be47634d95b62af6634e1","sha256":"3e3790dea8118c80a7a1d81af9454f8f6fe9a5dd180e843ce8ba638c5b446753","sha512":"f04755e03e559502d7d1d24571dc7a87fa09fcd6a70083256958b3e7b343921cf06d0b3169b82916e6b48333387f9bdd93ad027d103276195b7db0d384c7e1df","ssdeep":"384:s5RCCTFEoyA26uPEJVpLoXuAWhH3XyKByxtyXTtzQu9yXdb77FMKtCNqbfE9QB3z:sntR5726uPuVpLoXunhH3ChSXiXdDFMS","tlshash":"1192d75824143535933f385ed5b7874a7b302670f112859070be886a276fdcad2baabf","first_seen":"2025-07-17T08:23:56.415028Z","last_seen":"2026-06-29T09:08:44.858266Z","times_seen":782,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":6,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.081Z","timestamp":1782716092081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=I4dRu0uciHR16T6PZWN6Mxn0cT4aY0DUxhkw8pZNby8-1782716092.0836434-1.0.1.1-7Mm8rgTwLk5P_NUu_x7tfh0HxWISvBGJjUUfbD2hOL_iHwYohCvC7JWFzmAa8Y4nAhf8TN2c2w59AO7FcAUZFIywGnwHWjABsRoACpFQW2quyFgRRKKjN6Va0m6Te_tg; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=7983\r\nvary: accept, accept-encoding\r\nage: 6319\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b78cc223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":2848,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.782585Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-Slides-20250206165049.jpg","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.527Z","timestamp":1782716092527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-Slides-20250206165049.jpg HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:50:49 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TNk9Aebu2LDl6BcizTnh%2F73vuk0wBVL4crQM3tZbW526F%2BVR7HUqBanXxzNZVqyflyA5V17lFGpzOXaLPLx0j%2BsrSg9wPu1OK39iBMhgmqeJbav3KFU1L6zHlGmHf6jjxcPy\"}]}\r\ncontent-type: image/jpeg\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 193214\r\ncf-ray: a13305ba4e865690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193214,"size_decoded":193889,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"2c21daefed506485e2fad24a55e6ef9b","sha1":"69e05e559e1ec960d5a9518b3c71a549eca6e609","sha256":"441bc74a5541aea9d291562b4398ea872932f039e1140b2ef9764291c330380a","sha512":"fe995e0bce3f3b6781c9eceb6cf46014d30e1b53ed399776a006f8c9b9740fadf2399d35bd0db163b631c1ea9595cbb37d83dec0f4c8b5d808e6c372b4a2a688","ssdeep":"3072:QKMX83JCf7iSKs0ZujAHfvJA2JMPoZV1pAlgZVOM+vnT327ZnXbx7jEH3VV:VMX85Cf7RKsOusH30AZrpAUOtnrWXdjU","tlshash":"0e1412354ec1db0af3f4b65e00da5f7f402d26a1da4a8464761e3e38b619c7a6cc02bd","first_seen":"2025-11-01T08:31:13.810664Z","last_seen":"2026-06-29T06:55:32.430327Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-spad.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.059Z","timestamp":1782716092059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-spad.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:16 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=SocPNPvYOG8PHfrmL.hJpfFjJ9FwSastMnVoOH50wy8-1782716092.0610137-1.0.1.1-NMOBQErzrhEuVxat8Ku1qTK37cDMT6HCfua9LYgOY9eRyzUy8KAL4AOOL3aNdIZIOvwPHJYFeCxLf.WlOIfXyopIX7OFbhfK97G_7gFV8BaAmNCRlCcC4OC4XIOh_Y1X; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=4945\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 6936\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b76c4a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1258,"size_decoded":2106,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6290e499ede13e741045d26dfbd95bf","sha1":"73a41f0d753bb0843be9bfb147e1999ced0e30d5","sha256":"ccdb75fdea9558a8454442831c45017f205cd8729bc2f0399b91e1fb2473cd89","sha512":"d298b607ea2d753ca7be21e5262482347db33424add9a27ac259675bcb197814fe2709b293e334c4a41cae6b178b8d010921f02444a1044788faa887368d290c","ssdeep":"","tlshash":"7421eabb74314115f4f37e1c9f757e0324c4c648f660d18876d259c2dad64402d4c36e","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.839775Z","times_seen":3371,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-l22.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.098Z","timestamp":1782716092098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-l22.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1410\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Apr 2025 05:37:33 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=WVvcg25ij_SHQxM9C4OqItLreXU7sx5nzkgnkpocCyw-1782716092.0994833-1.0.1.1-O870fSP8FhmRYaF7.9mRK4T5gCPzxQgYYJ_HUUpdDMWx88HWczA8nyX76Y2n2z.z9wRjg0JJsLjaVcABU5H85SIaLIRpNvSCWP3qchvjL0wuXbnYynlADD_1nCoJBLY8; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=2410\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 3760\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b79d1723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1410,"size_decoded":2258,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45b89f0c6420d854331da394e750ce79","sha1":"40b7d0ca3dbec643333db69e8418f851a84220e3","sha256":"8973ba339bd3e91614797a78d3bdd3b39851b72fea3ca7d361e5b57d667168da","sha512":"be63c0770d32b2909e12d918a576275d8b4ad5f10f30f3dfc0716996e07b3510df04a746a1624e7a51ec67b72b718ec1f956d46775324c00c614c1e49e9e9a5d","ssdeep":"","tlshash":"0421082b71acb6301ab0644531085eda9783b419f0846c11cbb178699bbce8ab6699f3","first_seen":"2025-04-15T12:52:35.808781Z","last_seen":"2026-06-29T09:08:44.837042Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//events.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.200Z","timestamp":1782716092200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //events.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4764\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Jun 2023 06:13:46 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=jSS47OzaXGKejHIeIms5OWMGj7azDSwHMW4yhi5F7oo-1782716092.201416-1.0.1.1-CHDiXjRqsq268c6aIcW2RoHBMrsTBsAB9j6NCTOA55g77XMpK_8yOaA6ldXbFzo1YqmK1n.Ky96BpQrnIVdjRFdzOanLemkeOxOd.891MQMG_zSb3V8Yjo2IFfLDUCk0; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=6850\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 5265\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b84e9b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4764,"size_decoded":5611,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fcc8214161918b4a6454d0012185214","sha1":"ef1cb58cdb13c4eb20d829b0a1e5c0c7ad07f1a5","sha256":"50bd32098504e3e1e509c05915be1871628a9486e8d76b84f13384b27df09c62","sha512":"80232fa4bb935ba30c39608c09de8d0092f8a755017025b43466991cf82665d7da23e98170baec45aacf6de7b67e0a652e9e384404b2a1e1e44193a5f60d15c9","ssdeep":"96:5OAObmsqYZpT6KVsJjm5Odtk0HxVGBvC5wyJ++D/Vetw:4isqYbu9q5ONVbxJ++D/Vetw","tlshash":"0fa18f3e4236d24b80457babc61d963a7753358ed501feb40fc32752d1758f602816e7","first_seen":"2025-02-01T22:41:26.02949Z","last_seen":"2026-06-29T09:08:44.810874Z","times_seen":2878,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-Slides-20250206165113.jpg","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.528Z","timestamp":1782716092528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-Slides-20250206165113.jpg HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:51:13 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thPcSTaWaIoYP9hzh1pMP0X%2BqWbN%2BiyxrWvEz6lNMGdKCA870DZL148XmVB0Ciuc6sKbRmb4JQdBu6RQTqC9QxubSQtPj5td6xQAL1MvlTmMHdsrhb7u3jSnbsMZ8lM7pUVt\"}]}\r\ncontent-type: image/jpeg\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 188956\r\ncf-ray: a13305ba4e875690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188956,"size_decoded":189629,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"2918eef1d14a390f46a45995ec44ba81","sha1":"551112a4befbcbbdb3d61b43b4fb7f829d3fdc9d","sha256":"c84ba29d89c89bc1111290fb8ed942bd1e4a02213a545ece66c1c7c7812982a7","sha512":"bf1a9fc8aa8070ec2aa67cf00d37e370ad97e576556122475bae263cd014b3234addad3d6c46f5c17c8f875a265bf18bfcb29969ada4753ab8fbd827f7193faa","ssdeep":"3072:QwJmtxlJS8kkPwyF5LjvtMPEMp3F5+KUCxYgFuIB3wAPXQrDFBKZ0UisV+nGkb3G:QwJmDMyPnsEYf33ZPXMDFBjjY+GkbP1s","tlshash":"1e0412bc9031a4f49fbd8d55c7fa737a7a01d825394361e5b6821f39269dbe8a0338d0","first_seen":"2025-11-01T08:31:13.782083Z","last_seen":"2026-06-29T06:55:32.433061Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/provider.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.863Z","timestamp":1782716092863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET /assets/provider.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: __cf_bm=sDqXyG2u71HEhT8p2MNJ658fPMiloGSexkGWfPNwSKA-1782716092.2044237-1.0.1.1-u4StqQawPA5jvPA4W9tQem2v7NSOZq4KDLJGJjS33.k.T6UURf41luEXhnMPX7R.5VxkA.ROiBkp02hCGfwMWgUeWR27W0GKWVUqcdXH0QVURQSBfFLapBbNYKttiEzj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43118\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Jun 2026 05:28:51 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=82966\r\nvary: accept, accept-encoding\r\nage: 6947\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-ray: a13305bc69fd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43118,"size_decoded":43641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8617361fbc3297a9eda1b8be6bc90a5","sha1":"00a7ddac6b04db8bcc2ec1de926890ddf05f2d9c","sha256":"85051348970b6483224116e766434a053b0bb68e01d403ea8241fc59928b2388","sha512":"e3339157816c3d314a6462780cc0b2f04cd6d6b20165b1b09c1e1a28dac1c4cfb7bc30a3a8085f04c5421fe0e681cf159bd9d71c44b50063b6bd1f6ed9048571","ssdeep":"768:Y1pNk5wYjXNrxGbaoetJ87zJRym0nI6brWj6Ig6FcxG02Lxl:Yiwo9VGbNoJ5mGI6bCjm6Fs2P","tlshash":"0313f14275c388b6f85094adc194e0fb91ae0d4223b9fd38cbd6ae6fb9374281355e4c","first_seen":"2026-06-23T09:26:13.69502Z","last_seen":"2026-06-29T10:03:13.894405Z","times_seen":71,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//promosi.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.181Z","timestamp":1782716092181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //promosi.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4572\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=6991\r\nset-cookie: __cf_bm=L3eDGze14V43M3yapczcGSoRssLEZstdX2w8cMOYZI8-1782716092.184507-1.0.1.1-zMAfx05h2ZdHXXg77GWCH5p7RiB_fFZzYAkHVFncdJQ22Z.03675pvMtrW1depyn6GtahCRlqXTj4tB.8iEPHFMp6_sI._ujz8vjs5bE95hRTHw.q.C2vjVxdDGEPdDy; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 3814\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b82e7223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4572,"size_decoded":5419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22fe7e055070f4d93573d911106f0915","sha1":"f1a2dd86dbfd35926751fa3dc475610b8bc3a9a2","sha256":"e4fa61fb5af8d64e7261796f4b1080b885dd33b4d33182773165ef2c418cf618","sha512":"615e8cae1aabbc9c122334c9f567046f1b7b2151315d2878e7b34ca430bd77850ae930ac9941f933529129e9af54b8a4a2fb2f72a7415699fd38120710f4603c","ssdeep":"96:Kg0nKF+KSETc5+EX0F5k1tiOyLgpXCIOTAtzr/LJK8CP:pNDTc5zkTKyLgN1EYr/LJK8G","tlshash":"8991aea2e037412f188f43847ba48bef3eea8924012b4eb1b8c25de8461c15d32d0677","first_seen":"2025-02-01T22:41:26.037317Z","last_seen":"2026-06-29T09:08:44.830404Z","times_seen":2890,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-Slides-20250206165204.jpg","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.543Z","timestamp":1782716092543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-Slides-20250206165204.jpg HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:52:04 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3kWteONTVbZQyY0gD2PEMLqZcoqQpV4rx%2FpAEECavr0rO5EtcKtksWiEEvPh9lKl8tVRFNJAdBRbX%2FNczu7eId8bdzAhy9bz1GUJG5LSk1NG2EXdCzfRBPulAkfJrLpNQmQ\"}]}\r\ncontent-type: image/jpeg\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 188741\r\ncf-ray: a13305ba6e8a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188741,"size_decoded":189414,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"064b3cc789320ac195500fe4d67b963f","sha1":"055ac68843ff73d0a8b1ea7e766961e2268530f2","sha256":"e5b724ead6d025c7751466f308bb494ec3e9b82fffe82fdd8a0a31711f0667ae","sha512":"3a9a5f819135a4a35ef6f3e2fa2f97e0a61783d5fbe708e6e1ff20fee71db52b38c6ead2e23bd4edc1e9b40608604068a2465019655462ed076a5a4144c9c797","ssdeep":"3072:mqPyHiMWMGjF0ZbOCKdFwrHOumLgI8Mn99SsV7zqHOFnmnPUOBNcrVa9HQwFvmm:mqIiYW0kCZrI9+U5nCUaYVa97vT","tlshash":"a3042351d3036c5e79b9732896492c7c2ddcb4c43ac9da4ea047f4d7be14a6bacc92b0","first_seen":"2025-11-01T08:31:13.837907Z","last_seen":"2026-06-29T06:55:32.435067Z","times_seen":12,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.697Z","timestamp":1782716093697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 03:03:35 GMT\r\nexpires: Fri, 25 Jun 2027 03:03:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 359478\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":30508,"size_decoded":31321,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-06-29T09:08:44.845504Z","times_seen":10573,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-togel1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.039Z","timestamp":1782716092039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icon-togel1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1916\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Dec 2023 06:25:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=3573\r\nset-cookie: __cf_bm=4YRl8mH6qVo52sS2zKE9Rml7nkjsimkSlLBFaWtqPCM-1782716092.0419605-1.0.1.1-WfU9MhuW62GNaf2e25tPYlVUj8llEqZq1FuuG1uNJoI7Vra0SMOSbnWHCCSqmDqyXjRHH_wLmC6vveKlwOVDInxtJ2Jmhd6a4y2L2KSc3oam.grfC8XTlCZxZDQgISXH; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 4887\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b74be323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1916,"size_decoded":2764,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b306d736a18621948e272f5e0fa5da4","sha1":"fd3152657117384a997cfce3748c52398a5bc58d","sha256":"b91d8ddbd317eef3393479d983082ba6a8161c4c2b36e2caf544530a23600ce8","sha512":"6ac579745dda219f72a9b5865ad164f0434b12e7134dc788ea1c8b830762c99d4338708c3910b55bf704bc9fab88357a20fda7498d473b06b00b82934870ddb5","ssdeep":"","tlshash":"7f415b40892c3564dcab700d82b2ffbb0bb00993668636985f5fb60bd4a82fd5c0731d","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-06-29T09:08:44.835213Z","times_seen":3282,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Japan.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.661Z","timestamp":1782716092661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Japan.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1218\r\nlast-modified: Fri, 09 Sep 2022 06:17:12 GMT\r\naccept-ranges: bytes\r\netag: \"0a464cc13c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 180;u=5;i=?0)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKDf8gI7j3H3FQZcSmf%2BHR9J%2F6MLYbuGDLoWSKHbVz46HNFV%2B2AYzsHjEgdGTpUGxR1PXGxxDGetagnN8iqG76ZB6bPY5kS%2BWp2SmgHMgUPnIxQLeAgSMHRsSdPB0dYgJjvNZA%3D%3D\"}]}\r\ncf-polished: ok, orig_size=1476\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nage: 171524\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=8ssz030ILXDCq8s80LnWFIILnRn4boKFiar353Hjpco-1782716096.031001-1.0.1.1-VF.ORHyQGqEucctxISvWBwnd3WyldsMCFSDGfMXmzyb__N1UBxYuwfVPScX3v4kYT.g_vnQIOVjiV39nmhf_yBWLtAy5Iisi8qhVEMS8OJiI0nL6sl9EhEQczsxyW9y4; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:56 GMT\r\ncf-ray: a13305d02a458be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1218,"size_decoded":2430,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d432c26c5eaf0bf3260f62d098e6e0c","sha1":"5c8a9a4a8245fe90ef83f442d8b869fec612445c","sha256":"e9006d784e62bef0da61228d3c733a97dcf9eb0411f9d4076e74bfdd8883847f","sha512":"1157a3bd10661dabed7cae34b2450cd61b321cec8bc3b05c8416779b65dd6741fc2415d4414e5a58e33c80b5e6dca11ee177997acc9ddd4f9c65b68c99fccd02","ssdeep":"","tlshash":"e621e72e7984889830adf54e8b67664d77c0e00a2708242b3a1abff8528148e78ac493","first_seen":"2026-06-10T22:17:35.713597Z","last_seen":"2026-06-29T09:08:44.829219Z","times_seen":137,"resource_available":false,"data":null}},"time_used":3374,"timings":{"blocked":-1,"dns":5,"connect":3,"send":0,"wait":7,"receive":0,"ssl":3357},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Netherlands.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.767Z","timestamp":1782716092767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Netherlands.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1136\r\nlast-modified: Fri, 09 Sep 2022 06:18:12 GMT\r\naccept-ranges: bytes\r\netag: \"0ea27f013c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 257;u=5;i=?0)\r\ncf-polished: ok, orig_size=1434\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KNM0Yw%2FRQSQzCCI1OtVttchXM%2BiLj12mvhD%2B4XYHpxT9KyguTTtxmPQs7df1UXi4C59hBeEr%2F5elC7SyglRrRksrLtM0kP0bF0BTmNKZ9dlc1%2BvVkW8VwMtRYb%2FQYKQgH78qw%3D%3D\"}]}\r\nvary: accept, accept-encoding\r\nage: 440303\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=I3taMvi0tzV7XoPxNDfcbRhBMlBSqK4spWz6hovqUGc-1782716092.7692633-1.0.1.1-1E7JPAX_u4.ymQQVazJJB_0iFI_Lp7bjA8CSR6Ac7eO.pEkEz32uQgOX8Cu.MzZf7D1HAaaBu9nHvU.JZ7nh3M1nvbtbpVBJnHbZV76gMLnxCtCWd_GHGYu760Rz.PAw; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bbc9848be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136,"size_decoded":2353,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a2256f80ae875a7541759f93f55d38f","sha1":"bdb66b26887b20e9d627ce00bf3d7c4c3450b040","sha256":"447beb27a34ca85804ea7555fa7dddc1ddbf8b7c93f2202797b4b077f706f115","sha512":"bfd5dce9895f7ee2f8ed0bfca571c97f469446e456c707cf1695409ed75b725d5a234052bc3303a792927bc7510f171732ba8ba630517c498c782e54e3794441","ssdeep":"","tlshash":"fe21c66c6da2835b62818d81192bf4bdcd80f14542d8f2aa0cc7f7505c4a3b9b406ae8","first_seen":"2026-05-17T21:10:52.757445Z","last_seen":"2026-06-29T09:08:44.777699Z","times_seen":208,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Sweden.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.802Z","timestamp":1782716092802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Sweden.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 634\r\nlast-modified: Mon, 14 Aug 2023 07:32:57 GMT\r\naccept-ranges: bytes\r\netag: \"80da758b81ced91:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncf-polished: ok, orig_size=1548\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UwlI4%2F6dKfI3TldUARa13JvZLkQ%2BsmCV8dhLcrWCvjTWLMjRIz80lCHoFz4isqpEptMlKFPa4%2Foa2NthchdVGk8L%2FUdSciaoCx8ijGsAiSecNxp%2Batvcry4n%2F4%2FAyD9wA4ggTQ%3D%3D\"}]}\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 497;u=4;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nage: 113551\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=kfdBBJj8HB_aUdbAsz86AAciepRDP.83QHLnjJmct.Y-1782716092.8036315-1.0.1.1-Y6iVSk4Z5jkvEFDlAiHFd7E4ugEa_56bXvRfOn8awmKspoI2ACTQFySCi5hrTPpwVFjGRuDKnJZrawLjurdI2kw0QIUKHRobK8.DqNs0OXbn0AQ7JfUoHfkOeUljz1j.; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc0a778be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":1853,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8750e2147d510a79074154e14423908","sha1":"027e8718542a0aca10dbe02d3b4641beed914146","sha256":"5c8c87a7ad3a592b65afdd1b31fc1e117e55bf3d7074adf7d7cc60b778cfdc03","sha512":"0f5761b89d4329fc26e5753ab5ae9a5a6b0762ac342e5f59a1aaf637eab30b4d35e8a3cc7028efa8b03c40c3287882af0574b42d5761899ee0484e0438e77a6e","ssdeep":"","tlshash":"26f0684bd7ed9e80478a681d64b7d6a2543300e1894ed50ff1438303e4011f6f48928f","first_seen":"2026-06-14T15:08:11.218459Z","last_seen":"2026-06-29T09:08:44.818241Z","times_seen":82,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Croatia.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.844Z","timestamp":1782716092844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Croatia.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2330\r\nlast-modified: Fri, 09 Sep 2022 06:10:23 GMT\r\naccept-ranges: bytes\r\netag: \"80319cd812c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 405;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2701\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8AZHGvJTlZhD4BxTx6k0EwIClloScCq1RJY1hdHyJ1%2BtfjkxQOC%2Fyz8VagZP3txt7wXqtRifr2D8E0z7u89r8KQMSWXJtXEb7JMs3tZNVs6k3kOaDVOANgBBja9nXKOtWJyuxQ%3D%3D\"}]}\r\nvary: accept, accept-encoding\r\nage: 1143\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=z7_xAnmRTyIAGTqhDXghlHgPeO86hd3sP81QROAT41M-1782716092.8450363-1.0.1.1-qie80DDdi8WFGJLTTvmPm52Yk4yEszrKbN7ccK7Widpx7g_zBItuOHyHJ.k4D6wTOtA9R5S4l7RFtBY682gSTOYXVAp6z.2BTyXGNZqP6aHnIDuw5fJ7lCyKHOmy2Kb0; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc4b618be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":3538,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"59e8d2044a307e1593bf3d6bc22617da","sha1":"4e4b955c7765c95a62925a1e4a2a2c0bf51a750a","sha256":"3b43abbc4ab34e04d53b580b4316e2759c9f85173f2cb5f0921458abb70b0ab9","sha512":"0525f963b5c5a6c68e3ac670fe50b9115b1f1419f5dde56327e5bef8b6ba21d97f612cad3a8a23a0904650042f654b477cfe0aeaf50550b5ac5514eb7a1c12bd","ssdeep":"","tlshash":"5d416be9d03ee3b41bf78d80a12c6e1d838524aee67946004c5ceb3d303471e61e1d27","first_seen":"2025-06-30T23:47:58.570719Z","last_seen":"2026-06-29T07:01:41.277691Z","times_seen":150,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sagaming.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.112Z","timestamp":1782716092112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-sagaming.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 810\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Mar 2023 10:52:26 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1589\r\npriority: u=4,i\r\nset-cookie: __cf_bm=lpb2WkFrVuklwL6vqOutjSTDZlYK4AOC847iE5JYUGg-1782716092.1143858-1.0.1.1-9Osq86kFQFAvtCSPQoLCpdTMjwh9rekhSkK_ojw7HJg_6Dve.64xOf74eowvtVa7QjWloyOB.AU3E7EzZ7HM3pHhnn_iWnmYt2Vwh307ZdBb3QNWHCiLXK8G59nYPE2e; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 196\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7bd4f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":1656,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edf6fb693748c3b5b424fd6475014c9b","sha1":"c364c1f56ce3cd0cebb4ef30789dce88a4bc6b74","sha256":"0042c9b4af9d92d4f8823b8627445ec3a4c6282f31f048caac2d2f788815ba7d","sha512":"554854ed0a1ff2e89072eb8de3cf9d53eab3f8afd60de3ab6177b8338689ba82cf2c537c521d137caa7769914ac762c693ff9817886787f0027134069ca3300a","ssdeep":"","tlshash":"b301c5a970c8d59fe63fe0b9b10f3b039c8e47a516306f228eb0389443245530bc3803","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.809537Z","times_seen":3370,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/css/old/template/RP.css","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.977Z","timestamp":1782716091977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /css/old/template/RP.css HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:51 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kj%2FpxiDw5kQS%2FOs7FiCrpOzLe5j7f0%2BcLp88zPYekj5YPzvkjWHsKl7KFWM7hPX40G6AmyC30Vxf2BJbTe379glDuxJlk6OPRJ79R5%2BVcXQwFh0hYXhcnuzblnTXfNAu5kU6\"}]}\r\ncontent-type: text/css\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b6de4c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":951,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"eebcd814e52fbde659f9340272cb5fde","sha1":"6679f9c75043fcef08a2420079d6e76d96df5e96","sha256":"80790b7cf2a11dc283dd4b0bffe49806e3333749d6a50701993f7c4475ffb52a","sha512":"eea210f82047ba4b49d48121aa865dc07e1b6388db22a9507ad5e68023f9892f9e5b841372af39ce077f025dbdbca04047ff71d4c225ebc966b61de829606025","ssdeep":"","tlshash":"dc0126589c8a4066e13b48bf33f9a013f670744b949abba5fad85030af39414393a881","first_seen":"2025-04-17T03:11:32.470825Z","last_seen":"2026-06-29T07:01:41.292556Z","times_seen":117,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Ecuador.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.805Z","timestamp":1782716092805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Ecuador.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3220\r\nlast-modified: Fri, 09 Sep 2022 06:10:23 GMT\r\naccept-ranges: bytes\r\netag: \"80319cd812c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3694\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ElMSsSDDVJH4tCerXrH1bbb%2F2hZvIZ655SjJSEOFsVRbWiB4IUoqo3lqHnTvtwd5jo4ZKNnIxMbRHoAXU3qebVd%2FY4xTRR0RA2RkVnXcu3jn%2BzgqXnuUEn3plh0LLMCC5ZQ03A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 536;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 92156\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=skI1CzrU5Z47ldshDYptdAIX4evVvF.HgV8aZi4FJNs-1782716092.8070734-1.0.1.1-QnM13H0RCWKPA9nb.Nf.3MacnaPuRJP0Ux2b3friX4Ucdvhc6KKJIhSsPJY_5YuW4xozIm1tU4CtoFo2pls4o7N9wVoDQRaAX2_xMUo3VPj4i_zZH_fJxWttVW28Ge2M; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc0a948be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3220,"size_decoded":4431,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c8766ecbfcafac4bfd8c022468bf23c5","sha1":"38aad5a8c1d1e733413b21c425f46240beccc089","sha256":"a5b00f05662a20443df1c3b9a652758cd6f1653a5e685e0de134ef8c20d38fd9","sha512":"e536a81c62750dade9f03a16ff7550d9d8b1133ec0fbb8037f0813b8831a3836dd82a6b51ffb30999d3a5a5558354e599b63c30b275d8fb90dbcf05a1cb4378d","ssdeep":"","tlshash":"36616f16434179391f3c6636d78b32010aa84885357fd43baec530d9b475c470a6facb","first_seen":"2026-06-14T15:08:11.223566Z","last_seen":"2026-06-29T09:08:44.836268Z","times_seen":85,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-evo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.108Z","timestamp":1782716092108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-evo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1224\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Dec 2022 07:19:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=7NEDd4YrVT5gl8KqA9pNn55Ju9tqT2c0fIsorj6ELCw-1782716092.109583-1.0.1.1-1oHB1ud4f3QYXJboUtJbpOHbVYXZttZXjyR1C_U6u0fuD2JrlvoDn7DAgftSk6DDCy5962eCeAtivhIfF2Orc3X1FL5TC0zKUk_rJGLy.8GdwgMzZsd.mD8zrd3MJ7rB; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=4930\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 3760\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7ad3a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1224,"size_decoded":2071,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a27aeaaf4f87ea70e9d8f179dab9c1d6","sha1":"acd3b82f10cf00f0487ca7fe1e22ad662d4638fd","sha256":"9d16857bece7fbf86f719af897f7a7036dd151d2fa4d31e2ae08f863e0dfe179","sha512":"c00bf7d196964621d8aa2659f4e940e3726d152367dd270948fd168ff06397f1e1aaafe70e563bc19bfe8268d8dde742520da92820a36fde5f1e11897ef6ba19","ssdeep":"","tlshash":"af21b46d4a900818694d3ad413260f2b3361e61afd47c8e266ad22e8b1228184e2b8c4","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.793835Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/m/capreg.php","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.206Z","timestamp":1782716092206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /m/capreg.php HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7hvLrWyYBLjOHtEBhItKN7o2VFLwQiii%2FaOk0fYkqjpJPvWAuBaLevAGG%2BuH4VLVvjo%2B5cJzwbt7sJaxjdR0rSpGGTuEpneU9B26RB0kAhzscdrcX%2Bl5nUknio4lo7MYjWa\"}]}\r\npriority: u=5,i\r\ncontent-type: image/png\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a13305b84e5c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2616,"size_decoded":3344,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"d05c691a910c142215044e40e3914176","sha1":"f12145a59ef171ffc8d6c16002381f88b561c592","sha256":"bfcbc3132ed262c0db0720cfcb89197aae3727683be2c6c20d3b8dfc995d5d48","sha512":"b6a5a48f02f3b51ae2dae7554908ae6659220ac8c1c579fdb65b0fd99c22060a24bb26ffc123c75aa5cf0b9ead73e26d9652e89bcf7b03316ef13d742f7c0444","ssdeep":"","tlshash":"86514956d8d44dd2c32c23359b9bfe0081a44d3c8ec5cecbf09460eed2b166a0620bb7","first_seen":"2026-06-29T06:55:32.441384Z","last_seen":"2026-06-29T06:55:32.441384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/capimg.php","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.218Z","timestamp":1782716092218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /capimg.php HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=filaZHQMWB3KqHyXHOQPPG27nFBZnrCMd0EhJ3Vp8rf22TpLiqS7KQDCmD6yUF%2BSOgOhKCVbQP0N3xRZxIbKsI32UtM7eUpgkLLtroGBLDrrhDoTOiHQCojYYQcvEiJ0%2BEkK\"}]}\r\npriority: u=5,i\r\ncontent-type: image/png\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a13305b85e5d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":990,"size_decoded":1714,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 8-bit/color RGB, non-interlaced","md5":"92d41b281ddc30d434af5fd09d51d6f5","sha1":"b132a43ba7d5a453207fe05959e4563630e93458","sha256":"1f78516f64d95b6c39c15b9e48e530b1ea5de8d08d23857d8ebaea7ce822ba07","sha512":"6fba15f6e308ffe2f96399e4593578b80650d55ab6fb73dcc6ab756c5c4dee63b18b14780120dc7837447ba9edc205f64ed560dd094ea64c16f769171c403720","ssdeep":"","tlshash":"1a11c81270d2c3f394496044192740f77b56d5a78b0f1af8cc82d99cb9365356f80792","first_seen":"2026-06-29T06:55:32.442298Z","last_seen":"2026-06-29T06:55:32.442298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-Slides-20250206164915.jpg","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.494Z","timestamp":1782716092494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-Slides-20250206164915.jpg HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:49:15 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2hk3v%2FQpU3dViMJbKlnUc6ANjfOxTH%2Bf6oRBzTc11zaxcX2WzyUuTayIPQmXQQ9%2BwDsxfmjnceIOpshrgNOrnlAJzovS6PX39Rba4mhwY6KKnnQ0ynkBfwB3ZdvPr3iQMl01\"}]}\r\ncontent-type: image/jpeg\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 485128\r\ncf-ray: a13305ba1e825690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485128,"size_decoded":485803,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"0440947c58fe63acbd44bbf4ae674880","sha1":"236e6fa32722c8937a4d522c5a1f231bc3ca81c9","sha256":"3d226c317e076909505b96308f1fddc2e4bd0ed825fb9802789dd06ed6603465","sha512":"d36d0bb33fedd83c991aa80405efb7fed7f1c381dd6f79e1cda53d8b41440f173caa6ca6278afb5b0702c6313370732ad1007c7e90766bf7a2b9e61ea29a54c2","ssdeep":"12288:w3MWqvNasVVZN0Zv5W9bjV9mUDH9ZnNbcRb:wM3hNNAw9bjV9mIPn1cRb","tlshash":"c5a42339b358f0494eb26b61e9f02015785a6ea0362bf933644fc9d2e973fc06693717","first_seen":"2025-11-01T08:31:13.78658Z","last_seen":"2026-06-29T06:55:32.443177Z","times_seen":14,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/js/old/new2-webduo35.js?v=1782112559","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.221Z","timestamp":1782716092221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /js/old/new2-webduo35.js?v=1782112559 HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Apr 2026 06:13:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCcAmN2Hzt4tWvcHX%2BrKjrJ7BKgQj9Xcj2o6cFuf%2FK43RNsQaOaDawkG%2BsjbDo6jB2MDsqQAvkd7I93FuADlD2%2F226NgHwc2o2h7zidCX0ADbV81IWaw1lk5uAPh5MshIYAb\"}]}\r\ncontent-type: text/javascript\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b86e5e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52029,"size_decoded":9634,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"19c4e6575a2244de4704267b70c0d7ab","sha1":"55c3917ada6d548f15eb4395ac4858d2f61539d3","sha256":"94c8001636010089dac9312b1edb120556ad4e55e14a0497b78a3882ac49db72","sha512":"2a4afc432a780be169028d5274813a4d5a52d98c99eeff5aa6b1efde9bde19a5e178e9bbc6c8b8b13416f50c8cfa1b884a4ca1b0829a2681c7e81f82e8557545","ssdeep":"1536:LlNm46JcJAvMZrFhPO/CD7eJe3eNeyeiC8iaWiAQiI:u4sEAvMdFlO/CD7eJe3eNeRiTiPitiI","tlshash":"8e33424afb4c4a8f47f327a488378145af1dc835e20b4b05fabc48887b5a6557371a6f","first_seen":"2026-04-26T09:11:31.857142Z","last_seen":"2026-06-29T09:08:44.863017Z","times_seen":770,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Germany.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.663Z","timestamp":1782716092663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Germany.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1078\r\nlast-modified: Fri, 09 Sep 2022 06:10:23 GMT\r\naccept-ranges: bytes\r\netag: \"80319cd812c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 244;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=1332\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HhJqBYev3a8mIJCSKu6PAW1J0saPwh6c5ooJjprAQuF%2Fs%2Bdc7nfTGaxu5uNlESfJ4TR0kDU19mOTW43HlN9Y%2FPU4%2BTpFR5VMa%2FIrCz1Jqp%2Bg9gkAuaUUeAf52l%2FLGsNNtVH1kw%3D%3D\"}]}\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 113552\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=Xy.mD8cNlqcup4Nus0o.Uts0OtZmZ6GrAHTVAngcF1g-1782716092.8955681-1.0.1.1-wuRARN6WyA4E2Wo6tkMe3yj5qjl1wQDgZVTbGxcWh0HZ1pmtzjTxkOyOvS.cVlC0EFMZkzdZQfET9NVbVPgtmEHDtjfqJDMVtnBmDxp9.x.m78BtT785cuf2t6AuNmIZ; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc9c918be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1078,"size_decoded":2298,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"019fb16704a2687350003d4690419429","sha1":"b0bf11fade5c6e198a0d0986ebb1706a6230e6b9","sha256":"d5500e1c97fd15f5748ff0ab728d4cf2619f9d77b7ee007f37e06e045eeabfaf","sha512":"7b9088a9edbdb23f6c7ea0e330f80204f9c558c8bb8196047a546bb3b6b1048b504938f39142970598553fe871b8a419c1346714df11f56cbb0ab81211d615d9","ssdeep":"","tlshash":"0d11b9d24076286072ceeacb31390a229f5fc32185585d058f59d4e7279ba268fcd4c5","first_seen":"2025-10-08T07:48:36.01978Z","last_seen":"2026-06-29T09:08:44.811863Z","times_seen":214,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":10,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nxt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.088Z","timestamp":1782716092088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-nxt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 726\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Jun 2025 10:35:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1401\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nset-cookie: __cf_bm=xSp3OK9iFOsDkSRmt0j6xxDVgVAClb0MEtQ0INxejIg-1782716092.089826-1.0.1.1-eMqxQ.STkGQTGgendKoG3A2ndG7mWeVIeXiyq51jn_xqkmm3LBZL7m9bzatCwhj0_ABX_VRAgpDb6ruiykD58Usa5FtnDMs0JyJw8Ntffv0pZlMIzHLvhuXaIAP4x1vL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 861\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b78ce123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":1571,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6449a17268b8f3221bdad537a2018215","sha1":"a4f56e8c44c4a178b9f261fb449c8fb36c9769fa","sha256":"5113196adc5f4c02ea7f5026149ce8dd97782f2bc2aa701e3ee11919a7950b6a","sha512":"803c55fd5af1caa42b842c4cc3b6e53790e3bf8e2e09d70bad65c03ec3dd77ea0b94c10397b0ec16d26da8a1b6511ce35e26b6a6bcdf303f87419e41eaab593a","ssdeep":"","tlshash":"c5019914ab51f11216f732975332f148966e7082233883708f43394c32f676f5939e03","first_seen":"2025-06-24T13:08:13.727437Z","last_seen":"2026-06-29T09:08:44.859675Z","times_seen":2565,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/CotedIvoire.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.774Z","timestamp":1782716092774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/CotedIvoire.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1542\r\nlast-modified: Wed, 10 Jun 2026 17:38:43 GMT\r\naccept-ranges: bytes\r\netag: \"8a47fbfff8dc1:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 576;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69NMqr%2BR%2F0Z3aqgnCCjjtTFR1nxKh15JyoohoSOIzxVza8s2dn2hVfwsOnU%2Flq1K9RCskYAijsmAhXeKhEvyA1yp0Bn4JtqcUpPBSxSbztdYa5PhJLAYXphZI3PX4ZAEFB6MiQ%3D%3D\"}]}\r\ncf-polished: ok, orig_size=2096\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 171521\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=sjnGQ4EGQ9PTiWu_g4OT8.eGau_qHpUuQLjyVEx0nnU-1782716092.7752693-1.0.1.1-yfhR3f8UTgP2S2.RYYcHIoIsgiP8tfl0dpK1m7xy5E1PhymC_IHs0vR6XPl0WP9ciNXdb_vYxyx3LtDCbDhW66ONkR7p0ldVDYqogWLuo8nYZrHRRR_Zkt4Yhp_qMXAT; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bbd9ab8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1542,"size_decoded":2752,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e56f31f6e99de7260b053b2f60420cfc","sha1":"fffcb8c71bd859f3e806247b47442e1636f75f41","sha256":"c7a86bd78a29c2c1086109797137a4619c7dcd8dcb9674a075fafcc82248f029","sha512":"e5efd46a435c3832e485fbd4773f919647995dfb45fcbd6b2ec7b2790f3d89b562f9e1560dff3d39338f5d8bd6060bdff2e4e35f80699abfc153b3f5b9d7d7a2","ssdeep":"","tlshash":"4d312ccafbd14a6ef03358e419692e549c57609d0012ed9098c8d7e81c2e544bda2376","first_seen":"2026-06-14T15:08:11.192078Z","last_seen":"2026-06-29T09:08:44.7878Z","times_seen":85,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/transaksi.png","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.845Z","timestamp":1782716092845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/transaksi.png HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 06:57:58 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGPBsUbTm60jvYDHpwF6IsouGzohL1p1KfTSbuyV5YD9qovpiBxDBBZA2RHqo1o7UkSiDFd%2BvGkRYFzd9F3HVNvcc89Nycq1aFff4B0vbg9i%2FiLAU4DnPLzrlesGdhx5Ervn\"}]}\r\ncontent-type: image/png\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 218956\r\ncf-ray: a13305bc4e945690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218956,"size_decoded":219628,"mime_type":"image/png","magic":"PNG image data, 500 x 400, 8-bit/color RGBA, non-interlaced","md5":"03ce22f06b6845b126003566c4b55a80","sha1":"b8c6630bf76a1e00e1d3d0f9a09b7111ae2c7b61","sha256":"30e1c5205987eb61c60d00f5826662814303555dbae1373a7dba34bd79c384d5","sha512":"a5d75c88c4cb340eb1c2dbab05873cddf2fe24d3b5e79c2c735fa0a868ea1e095374dec7604af778612c02acc5dbdc0b4872e6051f1d71feb8309cfbe6d78242","ssdeep":"6144:3V5YETujPZrC53dZePFe2+y7BYYvSOTEh:3VO5xu53dZyFeWJvSKM","tlshash":"54242342cd028f89f850bd35e1d8c796ec7ad7d935c9e1ae9221c4401fda89638eb58e","first_seen":"2025-11-19T10:28:57.311271Z","last_seen":"2026-06-29T09:08:44.813003Z","times_seen":1478,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sabung.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.216Z","timestamp":1782716092216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icons/sabung.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 566\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=vqas6cn7rergmXgDfXEJ5QdSILGBXGNUTsjdaVeHlp4-1782716092.2173045-1.0.1.1-66QOocj8jMF72qyJxbpw.dRvqAhZEF6wIfA.ALjWqfkvoFO__kU8KMWAmioEm7LwOcemlLp7rI3vMXoqd0NnMm99I_cSneUF9c1c1blYf3mrP5XA0NPB9AiYnO_r_uk2; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=3751\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 3773\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b85ee423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":566,"size_decoded":1413,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cabc944e32056660a317f51dcf4c8c70","sha1":"c2bcbfc855467f946dc5fa5b3b562e8895c7b4c6","sha256":"7969b5e6f41c00bb28d7882e001bc3859f49337dcfd9e3b2ab5209e63ebd92db","sha512":"cf590ece4a8161e48e395941c5046acdbea89c6fb8711599297aff86cce1d2617759b5b66e93c10734b4e33fdada0f24e3b126c23c3cec482170c66960d4b09b","ssdeep":"","tlshash":"f2f0418383f44326a600b0d457554504084d038610756b7a7f963c454635da8ee4430c","first_seen":"2025-11-19T10:28:57.237919Z","last_seen":"2026-06-29T09:08:44.790944Z","times_seen":1797,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Mexico.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.803Z","timestamp":1782716092803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Mexico.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1420\r\nlast-modified: Fri, 09 Sep 2022 06:17:13 GMT\r\naccept-ranges: bytes\r\netag: \"803afdcc13c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 296;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1753\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WG13f1fB3KFioewkj9u4mBq080Hf0Ih8tPcXNQ8vH%2Bi0hDLFmwLEPhq0a5B%2F%2BXc%2Fons0Zs5o0uJCncIuisFG5FmaS0mk1HMfzmo3Nn7ViePaHHM8VUXqKS5%2BjoFc8y2CIjcnQg%3D%3D\"}]}\r\nvary: accept, accept-encoding\r\nage: 92156\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=yO6jiuMm9rm7_X3XJmgLuDP2ItCLWMq7D.6NMYv6pP0-1782716092.8049932-1.0.1.1-lpomSF6_5akyCflg9lmgJapmgJiOKeQ_ZEQKrj7nk2hsbRwHJSJ5DYUe24aEC..jzNihuc2svBc7yiB0PEzkapDQMXnWG1AGrGKw8iHjyHOGnAUpiuWeR7eiwWfFIaq_; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc0a828be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1420,"size_decoded":2635,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a32537d34975c6db9125fd6cc3c70d4","sha1":"9b0997bac756233852333dcf373aa194b7790470","sha256":"85f138bc755b48b5c335e8f84f1f1f6177b9608acbb95993c4f0f43492aa4c7c","sha512":"f02d757d8eff72fc1fd8c44b2211fe16a505bcb4cb6a515ba8788504a41199c6eb97da012b1a0bce583a14996712cc6a5901f2c96cd95e967bc966b3d554ff8b","ssdeep":"","tlshash":"f421e6561a42f48161c6fea2a8fb416afdb09a437a11693e828c014d6932fd2ed8420c","first_seen":"2026-05-25T14:53:17.112167Z","last_seen":"2026-06-29T09:08:44.776092Z","times_seen":108,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dnmbvxfnp/image/upload/v1757095121/FAVICON-1_hwhab2.png","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"151.101.65.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.720Z","timestamp":1782716093720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 23 Sep 2025 16:30:27 GMT","end":"Sun, 25 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"77:6B:7C:56:E5:E7:51:42:ED:61:04:B9:D9:26:38:05:21:1C:F9:06","sha256":"F7:5C:28:39:1D:C1:7D:92:F0:E1:D7:3B:EF:A5:AD:B3:36:CD:F3:E5:AA:BE:EF:53:D9:F3:D5:47:D1:F3:4D:75"}}},"request":{"raw":"GET /dnmbvxfnp/image/upload/v1757095121/FAVICON-1_hwhab2.png HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\netag: \"df4fe17c35885b4c3ee31f0a5ad5eb18\"\r\nlast-modified: Fri, 05 Sep 2025 17:58:42 GMT\r\ndate: Mon, 29 Jun 2026 06:54:53 GMT\r\nstrict-transport-security: max-age=604800\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nserver-timing: cld-fastly;dur=4;cpu=2;start=2026-06-29T06:54:53.979Z;desc=hit,rtt;dur=9,content-info;desc=\"width=256,height=256,bytes=72231,format=\\\"png\\\",o=1,crt=1757095121,ef=(17)\"\r\nserver: Cloudinary\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options\r\nx-request-id: 3f96d53c839427cf47e2bf7b816f4f9f\r\ncontent-length: 72231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72231,"size_decoded":72999,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"df4fe17c35885b4c3ee31f0a5ad5eb18","sha1":"97dededf1399b6712460b660ba8009e141f204e5","sha256":"a90c51b1bcd819981fc9641130e3c1b1e7e831b07c0fb6fb8381402e0a8f4b2f","sha512":"3d3f00af265dd0532c12d6e32c8bd144e5d388d76715aad19a680e7c3547154902f07600c3e8f7cbd5b767e9a3d0b7865ffe4509e40460f80c46bb15bc7041a0","ssdeep":"1536:uV829u8MRxzyxtMbHMM9xqPGvr7CShAp9bvkFSouW:INtuxzH7MM9xqPGrG/JcS9W","tlshash":"e8630118fd78ee20a8d2fd0b19de219050365cd2e8d694877c5e5f8b1f696096f2b0cd","first_seen":"2025-05-28T13:20:26.416853Z","last_seen":"2026-06-29T07:01:41.218418Z","times_seen":136,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":13,"receive":11,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.970Z","timestamp":1782716091970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:51 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33068\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"38cf3-SvPX4VpqOAxsurukLprfMwtJ1Y8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230073-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 6048216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hF6zGDZ79Le1WbObxDqXbw357kTpB8hOEJBMahNqSwg5jjTIZZ0X9MfpCVh6I%2F38kB9xSbDLjV%2FwJ8ibdqUhZunCM%2BPP5BWTvHj3yNUX8NdY5Wvixbj%2BOL6opJO0B2yZEE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a13305b6ea1f0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232691,"size_decoded":34179,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65335)","md5":"d603cfa239a34ac65af566681e7aa3e7","sha1":"4af3d7e15a6a380c6cbabba42e9adf330b49d58f","sha256":"16ee7f3d53462650bbd32e263c48c0ea759574fcf620c681ad719008912c461a","sha512":"8868c69b0226d541cd692bb088d15f077f87a734ff60b24c8983cace54045694fa1568b9adfa5bcab06e4cfb1e49c382581911b6cad121bad3cc9a50d3621a2c","ssdeep":"1536:Xa/tfXbf98fOdBfvO5wlP79y9A37onOHFsY/ElV6V6pz600I41r:itfL98fVnOHVI6V6pz600I41r","tlshash":"c33482d6f590317d9ca7c1499681fefd866fa985cb120aa6f003776847cabd30922dcc","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-06-29T09:08:44.790402Z","times_seen":4913,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":6,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.118Z","timestamp":1782716092118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1316\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 10:02:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=Q_Y_9Kl5ceHWgJgJHD2FCZGYf7lzWlyYl1RJLwo3qCM-1782716092.1207573-1.0.1.1-yrRpd2iA72jhMN.SksIJpoRbIJbNizdwHNlFM_C.Mkb4Fl0KE5DTOxHRGhuYRov9TrJwcDG.vH7HaR2p074AGKkMR7Mbq2_s5OkgU2uKgY_Y4g.FIOZpccICCcBsoi2Y; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2322\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 258\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7cd6923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1316,"size_decoded":2163,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d82d79c98d9d30be3526d638e7eb2189","sha1":"3c1054d400925292bc9c0bdca6f9d6b4b8cc7d50","sha256":"1f379fc8801fe0287a907763ef57ebcf097aef6dd3773500df5f938aed097dc9","sha512":"2d2d3ca97dd5e68354ba0cdc97df4219597405b141f5e55d00597175403e4216a3acef1bd2cd99345b86e88b4cdcc5e72d8639508f5b8cf3b01faa9c802a1db8","ssdeep":"","tlshash":"c1212bda91348d65770b74b143f4a86abda90132075668711149c5e4df8ce2002d8980","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.825819Z","times_seen":3368,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//beranda.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.178Z","timestamp":1782716092178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //beranda.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4280\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 06:08:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\npriority: u=4,i\r\nset-cookie: __cf_bm=AVDql4BCXLGjP_sthJkoWIcYvJmhSPo3yRkHdtBKZW0-1782716092.1799753-1.0.1.1-ha.Aq2Re0NSiuTz8c5pkrk8lCjggwNY5JoYap8tT4AYcgBF5hLNDBq3f1gmUuPTh4dH5M8ttjEKrOG6Gvu.HO.k0a9LG.fTpyiQyo9VHNyw2yv8HpcmQjmU6BCvHV3.8; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=5926\r\nvary: accept, accept-encoding\r\nage: 4274\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b81e6923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4280,"size_decoded":5128,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5c94e134973f78a3abd09f8ecaaa1a7","sha1":"b079718fafc29f5496df6186b28ed6aa4e8000c6","sha256":"de1ffff913bd404be635b1f1fafa41fb2f83e65ebef63467adeade423d491315","sha512":"f6519ea55de5c7b50edf0ce8292964fc798d4397733c19048e769f9de89c8ac5ca843c8544f4d9a1c8f046049df2f6bc6509af0057a76258158206780130ced2","ssdeep":"96:OC1l25Lw1FSSu4F4GR0hyjDxGCMiKmfLPCiKjf9S9Yy:Rl25Lw3Sl4RRRj1GfiKG5S9S95","tlshash":"70917cd24d58e0864d78194b4dccfb38405d143e4d955fe3261a47fc02bc2c0612edb2","first_seen":"2025-11-19T04:54:17.138379Z","last_seen":"2026-06-29T09:08:44.81055Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.493Z","timestamp":1782716093493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:49:00 GMT\r\nexpires: Fri, 25 Jun 2027 01:49:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363953\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29844,"size_decoded":30657,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-06-29T09:08:44.853008Z","times_seen":15461,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/driver.js@1.3.1/dist/driver.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.985Z","timestamp":1782716091985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/driver.js@1.3.1/dist/driver.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1030\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.3.1\r\nx-jsd-version-type: version\r\netag: W/\"f62-+7eGtYbhltE50OlNCKHiCEyYGPY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220194-FRA, cache-ber1080035-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3682076\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRVsXD%2FR9qtqH%2FZdg4noOvhBawoi4B8saxuBOt4JP3CmPZ7pYfI%2FNidfWV3JAZwu8NNRvMzKzZL20Qeig%2BflIgBOkfMP2WqOUBofvRDWf2aCOFg5oZNBGb%2BwtJhk73TPXS8%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a13305b71db05ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3938,"size_decoded":2160,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3937)","md5":"9a7949052a7f506e86cc0fe3b6bf1733","sha1":"fbb786b586e196d139d0e94d08a1e2084c9818f6","sha256":"4b398481a7ce8375af4d9f58f39410c73a0b70726fe513686d3d51c10ad76cb5","sha512":"8d1b0ceb65cc465df77b06744a2ef25fa00dabe6625b051cbcf9381f60caaf8d7b5bcd2b3cc5f36c3feda3086cd98128bb1fdd7ceb954642c1fb94dfce67e896","ssdeep":"","tlshash":"a281216aa1441a10e13be7026c83eac533179f91f2f35b87b5175883c5c70dddeaba89","first_seen":"2025-05-02T13:02:49.560729Z","last_seen":"2026-06-29T09:08:44.795674Z","times_seen":994,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cq9.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.095Z","timestamp":1782716092095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-cq9.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1182\r\nserver: cloudflare\r\nlast-modified: Wed, 10 Nov 2021 17:01:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=4157\r\nset-cookie: __cf_bm=b75QFOm9gY5bhHaseOIYc77SK3lXOwBX3oMkhCCuA8I-1782716092.0967994-1.0.1.1-4vecxGtqvcbyhhElpiLLPwdrbeiyF9jv4JLqgnoyXF5H_b.xln8A0Qzcy3KND0gaDMMXGj7te01.tEejPgb3fl7WdzeKDOTWGVKALFuLfyXFG9gdFy8CPyGo_jpYTETH; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 6228\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b79d0b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1182,"size_decoded":2030,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1a383f5c29c2a1abb0146f00f976edd","sha1":"d044fc1b18c28a0129ef1ffbeba52166614d057e","sha256":"cef9e6fabf6bc11ddbe76f0abec0e0f7106ba78a0b5499c3c640d82c8a7d6701","sha512":"279fb2c42ae9c6bd32b4c2828805923e1fe9a0f77f5502a62eba8636dc03367fa57174962395550b3acd4bdfcd8c8d17d722b38b69784cef18987476d75be2a5","ssdeep":"","tlshash":"a6218452943890c9da8498dc76c2aee5dcd5e99a4203e9964109d8e5a7b46b03820f15","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.815619Z","times_seen":3370,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//livechat.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.202Z","timestamp":1782716092202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //livechat.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 876\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1402\r\nset-cookie: __cf_bm=sDqXyG2u71HEhT8p2MNJ658fPMiloGSexkGWfPNwSKA-1782716092.2044237-1.0.1.1-u4StqQawPA5jvPA4W9tQem2v7NSOZq4KDLJGJjS33.k.T6UURf41luEXhnMPX7R.5VxkA.ROiBkp02hCGfwMWgUeWR27W0GKWVUqcdXH0QVURQSBfFLapBbNYKttiEzj; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 4937\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b84ea523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":876,"size_decoded":1723,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fd943c7ef4e87e7ffb66ae1d1ae3a1b","sha1":"ede68872809c0ff7a62a063dc889b961da200e8e","sha256":"8a8dbff878032e3ad32d7e087c77eb065b7ab5bce7f3956fc58d331bfe74f9a9","sha512":"5f9f21e0dd41194f02ed029a048a0e4c741b64d1e6ff0fce785f79864c2428a18424221e55dc0887068e0a4278bfd4daafa825ad5855c3f0f70ba01392e17c61","ssdeep":"","tlshash":"60116365970a4eec8283e8a68a1a09894f9920b2e45b295dd421e68bd4d74e6e02754c","first_seen":"2025-02-01T22:41:26.030981Z","last_seen":"2026-06-29T09:08:44.796152Z","times_seen":2896,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.100Z","timestamp":1782716092100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1418\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jun 2020 07:51:40 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=v8v_FnNnUBENSdWsKwoEVtn_UENUEgBF5o8DEPSIYf0-1782716092.102034-1.0.1.1-c7QER.3LwlGWq_0gy20VEN3o1WcttvSf9peyO6JA6t5PPearIKxOcz.3_wjmgmLk9bcdh5RAKQZK0YwVjOfzTxOt.GeHoyhAhmYcSueLawnQNwQCyKWfYwvm_d4cOpyr; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=7765\r\nvary: accept, accept-encoding\r\nage: 6228\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7ad1f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1418,"size_decoded":2265,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f1aa38c5a91ca20b6bfdee9245eebc2","sha1":"5f00a7a39257fc368e3fcaaf0b923f6a9fd49bcf","sha256":"57d9d0b26be6a4ea6d8894ff8dab03ea2c4400155146d5380281f4a589966e65","sha512":"54a31f338389d1b99243da7023fb2f109640cf90887627d5dec60f156ddf296454eae20d4d8a056f6682d56d3f0c9eff3a1b5af2ef4756816d61cb43586567a8","ssdeep":"","tlshash":"6a21c6784526df623d88772113f97f39802f468d47e803762ff91891346d2b42260cb1","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.858709Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-sv.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.139Z","timestamp":1782716092139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //sabung-sv.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 994\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 09:16:27 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=_kSLn6bzOtZvsiV9A5AUjavniMNgZOGEw7CoeBsGfcc-1782716092.1450584-1.0.1.1-NmNAmw1Vavu3ulUmIR9urZUgGQq83.kU8d75SB38UFSvZDF8dKdbRSlkGKpM4_v_RoPOOjxgFcCZRZaXuKzgeMkuKwyIgXt8TTjTq11GHG4PXB66o0S9cGofQzAHXBCu; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=1698\r\nvary: accept, accept-encoding\r\nage: 4880\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7edd623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":1841,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28ec208db2d7b9ab92a7def6285608b9","sha1":"cfcd270dbce51874a5b0cd4ebaa1bbdb5950423f","sha256":"1cf25e65aceed06d6fb6898f1f10c620b236bcf94676ee585d2ed8c258318db0","sha512":"be225647c983a5047d00ea048177332fa16493868ff5e4d8f6a66eb81bbc478ec674f689ab26684148ccd9f03150384403bc69929a0f8482e2950d1c07254630","ssdeep":"","tlshash":"4611a5a715386388fc32e548b241ed209d9c206fc161ce41b9e309cd8bc211c492b1aa","first_seen":"2025-09-13T17:11:51.504401Z","last_seen":"2026-06-29T09:08:44.842004Z","times_seen":2312,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/slots.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.209Z","timestamp":1782716092209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icons/slots.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 700\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=3936\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=XbtQjWhhndE4M.UaqGUV9EWuvX4PWndMJSXuGLVoiFk-1782716092.2123919-1.0.1.1-mWrD4jot8WF7U0OvFfua99vvGbByE3JKmGNZxa2G1784brGI2Fb2oEwaua6KcAQ31DsJpCgYv2XS38iL9w6PGBfM7PmZpvHsWISjW41BNK1doNr92hNx1O1JjGWuSbdc; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 5265\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b85ecf23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":700,"size_decoded":1547,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49004475ffe1ab21bd1d1845cf3c5bb2","sha1":"5f1b45dbf862fc3b31fcf2995a3d79c85db7e1a1","sha256":"bde4902504d927b3c8f18a0000db9dfd665f16757368d3e225e9c6dffb366203","sha512":"24376af88f7a418d0b2f6b56dd003515b34bb927d5a946171aa0e11690d5794bb41dc524994ce3a67bd5b90861098ebad29bbf565d262d215e4ddf7490577d67","ssdeep":"","tlshash":"440199f8a7e855c24830b90965600cbeccbfc75d3142ec0a27e154c531213e0e81038a","first_seen":"2025-11-19T10:28:57.236453Z","last_seen":"2026-06-29T09:08:44.82195Z","times_seen":1795,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/casino.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.211Z","timestamp":1782716092211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icons/casino.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 990\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:00 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=GBFX8aOCkL3BaxzHyN0YmSFDqcxe2J15PcJ6PIOzkJY-1782716092.2134025-1.0.1.1-bM396EHUBWOSnWBonDn722ospSNxVD10sJrRcdWyohv8sipj8Jtj1wVxNzNO3dkeIimTIsQSLlNDgsU4wm0jEBatBZICV2jiCEqHtaQwAEpFi4I_kUhvr30__Na8h670; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=4290\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 1866\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b85ed123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":990,"size_decoded":1837,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d3f2a042f3a157da682adbb52f3040","sha1":"40066f35a2a29d4bafdcd05179e9f2c7af1666ea","sha256":"3c22945d0cbdf7368c5eaa30f26611147425df5c45d7303551b9ba9ddfc957eb","sha512":"0e7768bd55d719c646cdd57e7b0bb038c668142fcaf10d3d61d33b3d992ffea15a8f48f18404118d64cc3cf791f37ab6b8d0c4f044ca91a550ce0ef87fa807db","ssdeep":"","tlshash":"1011c8a98739c523e226cb39cf0c355a84a86385f031b0bf95c2790c70ea32b3b4c980","first_seen":"2025-11-19T10:28:57.226883Z","last_seen":"2026-06-29T09:08:44.838159Z","times_seen":1796,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/CapeVerde.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.819Z","timestamp":1782716092819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/CapeVerde.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3010\r\nlast-modified: Wed, 10 Jun 2026 17:38:42 GMT\r\naccept-ranges: bytes\r\netag: \"2a203bfbfff8dc1:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 893;u=5;i=?0)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUqnZ97dYWjOyLadj%2BHoEpw77mnyOh4zSoEdBPo%2BD2goTSMd7MX%2FFumxGiU6C2wo5%2BtnNYoEhEceaZ6xq41k7slfFAX%2BKM3vzMeQDw%2BVMcSvZXH1e1lFWrhK0KF9F9mccrlELg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=3822\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 102326\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=MfJ9EAKPe2omaOxvhN0VdsaRzEJxMZMlAvnEulcUC7o-1782716092.8209066-1.0.1.1-rVCuyU7U2QVjwfhFGiruoEFX7zkI0coQqbbX817xTrzTgDSCz6a6kiMQqj9NSyvevGSS8PRrapIQa9ffXrHDKXMjvqrdML9Gt5J2mkEDVxL5avj5qbKNI8.tkotgch3B; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc2ad88be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3010,"size_decoded":4228,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10101cc8d29da9eb93e270e5f524216c","sha1":"efd64dea3747760e7438088cafffd249e13f518c","sha256":"487866fa4767a1334336447687b2f7046ea1de603385e198c03680bca461d566","sha512":"b7b34f93144558e4b849dc025a2e3d5a5542b8b05bc5f1a475406ca7a5e1bf2499ab20ec67331e5b81cf68a9f3fec568da2d747ac179da2977a24b96ecfcf772","ssdeep":"","tlshash":"41515ad54a9dbc64d2c35cef5064b24184d881e3a1a08e19884711acb6ba9a6e30ebe8","first_seen":"2026-06-10T22:17:35.771853Z","last_seen":"2026-06-29T09:08:44.803557Z","times_seen":136,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.491Z","timestamp":1782716093491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 121296\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"1d9d0-F9rQd2iZrRvq2r0GHDTioiss3nQ\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230151-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 4144599\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MN93dKhumU0lMPpjJmRnEHQzY6be7yc0q2FQPgKRASqFUP%2BZkdnyaOVnTQmKfAK5u7DCupKaY1VKXtyOeHtKoOCdhdRfalr8HOhjlHl376kC%2F9fGHArFk7LQjIh%2BY1APcLI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a13305c05b494c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121296,"size_decoded":122390,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121296, version 1.0","md5":"7f477633ddd12f84284654f2a2e89b8a","sha1":"17dad0776899ad1beadabd061c34e2a22b2cde74","sha256":"966620f9e3bec428663687f9e8d67a6b8e35d79adebf6fb204e9b139eada7599","sha512":"b46baa2a3ea38512f8b539774c751004cc866d085a9739f4c25f2ade9d97c10d6f4b20cf87dcbb6a003e0df0ca2df200f9036a4c76a013f24c57d365981f6e00","ssdeep":"3072:Nodp66TvfwN7lvK/5hwbCuy3Y5vV1uXZKeufOdZMJgQoHy:Gp6gX+7s/5hwD1RvqufOoJgHy","tlshash":"75c313267cc162a8bf6dbcb2545af65c99b4c9ce6a802bacfd30db90c1075ccd910771","first_seen":"2023-04-07T20:14:59Z","last_seen":"2026-06-29T09:08:44.834644Z","times_seen":7408,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/otjuijet2025/slot88ku/user.json","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.617Z","timestamp":1782716093617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/otjuijet2025/slot88ku/user.json HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 869\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"1134-4m92e6yPZDxRnHkLz2iSCiiq0CM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230106-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9Pkk%2BKtUyCL4bhvudcD3WXsJU8cY07G1FcS3br3a770Xc2ROMOjADl2UOFgeSI3ByoVVBY2A9X3nA0HQKbreCcatIGOI1QTk08AFtmqFJzUfRi6qB8dzf%2BZ69KjPFUEweQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a13305c11dd04c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4404,"size_decoded":1969,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26b8607097f2cf384829e1e708ac3571","sha1":"e26f767bac8f643c519c790bcf68920a28aad023","sha256":"3ab50d3f9140e403bf4c7d67bc48022a467f2a2d4a9ef4d7e0c160768f4c4f5b","sha512":"85bd3b87ec23602dfa768f6a878c170f463e8618a73e1b9e18cbedc00e12aff1a9223a0da16d995420ef85e29dfba58b9e603e0cc2f84e3e6b0dd6740fad39c4","ssdeep":"48:DNFHQ4JnUSxG8oPMZPN7yHQm3kZWFCJhtWHga33TnJR+Plpb4JrAf7b0Bbg:BK98KQV5ZcCEDQvaCN","tlshash":"5491a44e0e8b86fc38d9fe434783b27b659f75702706093358b9f628562a068b534f31","first_seen":"2024-04-14T16:22:27Z","last_seen":"2026-06-29T07:01:41.274634Z","times_seen":516,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.133Z","timestamp":1782716092133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //fish-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\nserver: cloudflare\r\nlast-modified: Mon, 22 May 2023 04:43:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1584\r\npriority: u=4,i\r\nset-cookie: __cf_bm=uv40DszfOt_O5ZEjz5dm0bMQHrIQeIxYwK3PpS_3UoU-1782716092.1349034-1.0.1.1-C_E3BoFP0LenmdxZafgO4UPmOjHFyirEQNvcUwC0A6nX3NsmBkX_eDmpNq6w2gz10pdFC.NFnpkSydjIJ_Ydwi4mU8NYnr2iXiNLpLEKLWvxF_zwA5BHC2oPhAfQDaHT; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 4743\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7dda623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":1639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-06-29T09:08:44.81001Z","times_seen":3371,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.150Z","timestamp":1782716092150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //interactive-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Apr 2025 09:02:35 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1967\r\npriority: u=4,i\r\nset-cookie: __cf_bm=UsJTXsnJKyrz79bXxpU4wIgAnVDHwO7GRf_YwqNJWlA-1782716092.1525614-1.0.1.1-PmwLz7c0u4HsabBFs_t0cEDXiK6wEssON05YCPMzmadTPnJk7s3rHf51ozLbOjXBmUgNFFkDVUEQZMHHGqL7dScvecEak8mvBnNf94aZ16bs0Oczh6n8hQh2eRJDt9va; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 1360\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7fdf323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1132,"size_decoded":1980,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-06-29T09:08:44.801653Z","times_seen":2779,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.111Z","timestamp":1782716092111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 07:44:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=CaYq4CwjSayIrJLlVLx46oNoGl6o7W5ZfD3oPigDRJ8-1782716092.1133966-1.0.1.1-VB3L__BBFqht.4gTbRixFPlvVZbPTMDYlbvHsa4E35eau9aP1528gcC.SCTaFefrE.yHQj7YroXxkKqd0MY5RJ7FQRKze_OF1AYHV5gYSe8OR4mC8JhJonOe1OdvdKw_; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2690\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 3507\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7bd4923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1480,"size_decoded":2328,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5226d29aef9aad472795f18b79eceaea","sha1":"ce47d4a7ee1d0c56f477dab5ff66c0de15432cb2","sha256":"bc4de63c2fcb87195d112cb068604727015cbe7cc14bd6c29c83d53f3a7aac2d","sha512":"f20e4f162b5abe9512de4f5d2bb82d8f9ba17ec199e74d0bbec14d83115baeba1fa81eb37c5fa9bed8c2b206844d95d92ac52ed1036d8f0623b83ac7d3b083a6","ssdeep":"","tlshash":"6531e92086baecedfd1ab65d4e4e0ea4452850a661808debfc1fd57021f0f6512cc696","first_seen":"2025-09-15T13:55:36.940008Z","last_seen":"2026-06-29T09:08:44.77286Z","times_seen":2325,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-Slides-20250206165023.jpg","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.505Z","timestamp":1782716092505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-Slides-20250206165023.jpg HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:50:23 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mA8K%2FjnfVfJfqoN58%2FMkPCUTlv4waNXhw63qyC03YAi1SXp7Y6Dsvd5InqzbTciWJmE4WP%2FUsBhOL8B1Z%2B2Lg5jbRTOccCAadrkbf6gt%2F%2B1Whg5HB3ViPzXz6M2u8gLIzcX0\"}]}\r\ncontent-type: image/jpeg\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 205664\r\ncf-ray: a13305ba2e845690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205664,"size_decoded":206345,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"b44720906749600d3efa1c2ff7144cec","sha1":"e126d9eea38920c3e1b8efd1cc4da90d2c0be4a4","sha256":"46fe277bb0825417c3816ae0ab21c37a7cb4e4ab3c44178882641f69a2c3c0f0","sha512":"4f248169ce2eb7b4b2f0107fe371a7dbe6eebab5a526d9f7e52caf95e30b63a882b2b00ce8762064dce5c883045ddde5984a2050c284504a9d1d0ed4ddbf6728","ssdeep":"3072:RUSNhfgPfK6f+DO9GuHyOt8CL3AOanWyfDVY7a5+bWn/oFBBNVw6oGKP61wVcMs8:1fwKxYGwpZQOanWyZsaoi/65oDwMs9u","tlshash":"2d14128d523d8c85f1b7d73645be5b423e74be25b360b24903a6807a0ea2351e7c7c67","first_seen":"2025-10-24T14:41:50.552838Z","last_seen":"2026-06-29T06:55:32.45618Z","times_seen":15,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/DRCongo.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.840Z","timestamp":1782716092840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/DRCongo.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3258\r\nlast-modified: Wed, 10 Jun 2026 17:38:42 GMT\r\naccept-ranges: bytes\r\netag: \"745f41fbfff8dc1:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hy86P56AFPZLHaFOgDExHZ8%2FXB9X6Qwu%2FX0xZhTu2zHt0r0r%2FsNGtA%2FkOEp%2B%2FRlVtvQzO2K%2BfEXCsiUZgOrvE%2FsXC78tm0wxsJ%2F%2BwcsBbPYIdmSQ0bCWA%2FOxRGuIcSnBLd%2FjPQ%3D%3D\"}]}\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=4090\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 883;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nage: 207344\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=oA7XzopQiq9kmp0bWSgd9OlsPpF6.Pt4fkBzNnGpUnI-1782716092.8420646-1.0.1.1-wZBQqxgOiaRxzlUPx_zT.SSJf8dxO3UbIYxqdirT5yZAwM0KlVgptwveJmsYxEs0dO3I1F4XM0TEy36MX8BLoP7Wpe_aBhHA818HREaP2VL7bnIisTz67y5bxRtj8fro; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc4b4b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3258,"size_decoded":4488,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a0bf53092bddbe17a25ec7bfa4622ca","sha1":"7c3a09848562189131bd60857618282bc94e114e","sha256":"a8b59cf8a512910b28e9c637229331871e9d3d7751b3d0a78fac1ebee24c1a19","sha512":"f159b65c1813fa05e6d7aecdf096df6704980176f29b100b508140b8d4a9be10609800810f17a5bb6c86aa7e3232539788c627a302ff1c1591d8cbcbce6bd571","ssdeep":"","tlshash":"7c617c5a68b452be05921c6b3f9241f868018a94a9f62bf30de66f3c06172cebf45204","first_seen":"2026-06-10T22:17:35.707126Z","last_seen":"2026-06-29T09:08:44.828161Z","times_seen":78,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.374Z","timestamp":1782716093374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 10:08:14 GMT\r\nexpires: Mon, 28 Jun 2027 10:08:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 74799\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34924,"size_decoded":35736,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-06-29T09:24:30.915442Z","times_seen":19628,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":2,"connect":30,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cmp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.093Z","timestamp":1782716092093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-cmp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 886\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 06:48:05 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=PZgGbFylPKyryRIwc4HC5bSTRPWCzLnp8b6wuNn..nE-1782716092.0952685-1.0.1.1-PU8G8THoG.H_ZEO0CezGdCKlzWB6YykAd2svkstND67MlnoduAPXo65Hsmh0NjimyfiXKixmchYP94MeUQFgpOOZ5WMcRfc_qHRXWntCrP_5BilFc3IXQ6jzrSHV10Lk; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=1995\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 1282\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b79d0023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":886,"size_decoded":1733,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6cb4315352cd82704bcaecbac64ccd7","sha1":"66af4e4de0848500ebc2641527e5ee8755febead","sha256":"67f9d63b2ae81ef3a719dda19901f66528e948c662a58cd2822d679918ade617","sha512":"da4a2f79032ebdc382aa5e20354502c9ca759b7e3820e85675ece4a2f809818d221251a2497b04ab025465cd1e6e65d5aa82367bc6fce7c10d72da4981f61efc","ssdeep":"","tlshash":"b711e698978898aceaabe09d9774bc3a4c0c223ab0009109a4b20dd5520b2603864fcb","first_seen":"2026-02-13T23:33:55.556628Z","last_seen":"2026-06-29T09:08:44.791483Z","times_seen":1275,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Portugal.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.842Z","timestamp":1782716092842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Portugal.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2284\r\nlast-modified: Fri, 09 Sep 2022 06:18:12 GMT\r\naccept-ranges: bytes\r\netag: \"0ea27f013c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVCwq%2FWJI45VZAzKHpik9y8Nldayr6q3bFj1sMm9XHzqgmsRAMJEnZav7ekm6P0eaP2c9qp0OY5kvh%2BvuIVPRmN5OE%2BbzNt1LnOE0%2FRfo0USliesqZlmnfqyR1Px28prqIqQlg%3D%3D\"}]}\r\ncf-polished: ok, orig_size=2611\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 347;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 673\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=VjkX8zMDBw_DEA6Y1TnTuscTpccaK6afTBkFuB1KmSU-1782716092.84386-1.0.1.1-0_520KuLNyzE5d72_mZd5y2jpbqRTkwUOsA07LjXgCg40T9zRjOxOEPKmEhdgXwp_ceQuypFAFAVVyU2zSX0pZqym4HON_GWJdsTCapjl9G.IHIZva6jTlvUnt47QwVC; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc4b5c8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2284,"size_decoded":3492,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"77af78b27814cc3b4ffdf00784a2d3e1","sha1":"8757819c594260b2a3e25927f23ed8606255236e","sha256":"5d1a2942e82620855d7ae72163aaebb7699ae96dbb5da996894416efbd79c401","sha512":"6a148b4c8b4da50fa4f38d4cf06595f35d2d5c5d52c40a9276b0dfb5adf031184dbefebac0862e0155d7dc4e17b1e20f74e4bd6f9f345a44e6b2da4b25568cdb","ssdeep":"","tlshash":"13412bf1af92f04b4823172ecbd2c649ee8b2f9012522573801286268d6d52fb5ce672","first_seen":"2025-06-29T12:02:46.031931Z","last_seen":"2026-06-29T07:01:41.322692Z","times_seen":199,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-Popup-20250206161344.jpg","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.881Z","timestamp":1782716092881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-Popup-20250206161344.jpg HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:13:44 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VzJ8qPwZFqnh7U%2FMEfeve6EJPE1S%2BcQ%2B0EI2UeLNG24DULxEAPd5JQ1f7WxxMvi140qdf7uUwWFBHun8WkVbGaYRdWlyJsiEt6O3T8JBoQj9qYQ6ZVmrGRC%2Fs18x8z%2BblX6u\"}]}\r\ncontent-type: image/jpeg\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 141198\r\ncf-ray: a13305bc8e995690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141198,"size_decoded":141877,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x300, components 3","md5":"9daacb364ac6532810d871ce0b8197ea","sha1":"359b54986ceeff840d29f439d557de0f670a8f56","sha256":"9e30bd52d9b24d7b7a316a2ac0537bc942891c184dd94864e18c9b8f9589d232","sha512":"2da9c4520177341994dec559f9611d01714058824100fecccafc4d17c765679d426f5f8373b6d0f5276fed4e06afeae1f3b8a3211b5b9ea35de6eda7b5824073","ssdeep":"3072:XjEVVji1CV98VaPOO63OebsSZ+Y+iONRzNO9ASas2J:mjiYKaPO/eebRsBNl35sU","tlshash":"a4d3220375620c21c6821bc1756cb289c62b4959dbd2fcc4caebdca77ac5fa4bb4650e","first_seen":"2025-11-01T08:31:13.820351Z","last_seen":"2026-06-29T06:55:32.458904Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/js/old/jquery.marquee.min.js","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:51.990Z","timestamp":1782716091990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /js/old/jquery.marquee.min.js HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmDtmTXYXHM4GkieyuGJREzvMJ7REH%2FZQhe%2FG0fWmLqJFn2l2SQv1EHRYuuXeBKomSNDrcTDLcBd2UCnwuzMkqN4JXgxBNYwnUOz%2FPJipZ0AiDBj6t8BdlcfhB5pWwblwlIi\"}]}\r\ncontent-type: text/javascript\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b70e525690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9052,"size_decoded":3263,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1219)","md5":"fb33cf2aed11f9e6d82f325e3a59aeaa","sha1":"23269fefa9d4c96301289553b145f6cf2224dc5b","sha256":"98e6d279e0a953b3aed10af732b0144fac9ec784a386750259b6b03eb3f26d93","sha512":"547b353276af03a66bd61b1b4ae7a41bbf604c6c69be27da542a2a9473e9dc96095f5df9b7591e74f71a264cd69076b44353f9c1c104f7472cdbdea82bda1963","ssdeep":"96:zceMfHftw6RX2wUb6cJkLIoeUJZYfShCmxxAAFzYi0yBo3nNyJmmxfbgFlUOvhWX:zcFfHf5kJkLIoeUJB/N0yB0kbfb29Fm","tlshash":"a31220d2aa703194cb9703bf948b02864e72d931641d0d7fb4b38198be60648bb17f3b","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-06-29T09:08:44.825273Z","times_seen":1376,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.128Z","timestamp":1782716092128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //fish-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Apr 2023 04:58:17 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=4WaMVTRk7p8y8JggNtuNv2R_JZKQu_xf46h3ph3QgMQ-1782716092.130887-1.0.1.1-7RaA89rYJa65TsO6SXXRttjKDoz_dLQLPhuAxTas0y3WfWSTmgQaDMzAstUVOHWI6rYjl7F0PhK5wLM6QuQg7lxMCgEgq2dV8Jb2Plf0u40WNdOUbD95zI2g1ZUwBngi; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=3284\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2931\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7dd9323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":2439,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.839232Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.109Z","timestamp":1782716092109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Mar 2022 06:24:43 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncf-polished: ok, orig_size=4064\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nset-cookie: __cf_bm=WozkjuHEsQvwojazRTn_iRPqoCAMtDzz0TJBP6IICA0-1782716092.1108127-1.0.1.1-mTgvAOi5qRIcySS88cVG7.nCatglYU_nBYPVI.t9rAomiingBusrbUlSAzh64eoCmGk7T_DMcOeOtAf60LstAwovFnudIEksG4.FkAlN6fQgfUBiM5PrVbFf_VnKUpUX; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 6228\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7bd3e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":1940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.783087Z","times_seen":3371,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-ws.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.135Z","timestamp":1782716092135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //sabung-ws.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1366\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Jul 2023 07:34:01 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2970\r\nset-cookie: __cf_bm=Lt9cPW5VJ.81Ng3daRb96o6daWSeIGhqHNcv8MBxqZM-1782716092.1364977-1.0.1.1-AfquZdxxy8ka5m1kBeeFamSt0VDRRK3dZqRGvXlICuN6IyMo5BhhwZAqk5VqixWPpsWcv7m3t5MVxGSorY0iPtqWyere3qg6TLy1Z2h5OSgBdo9PtOeEudAbIv9pQwhv; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 5790\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7ddb023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":2214,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12e10125b7a65d74f94467a847dce8bc","sha1":"c67d4b17bc3162371c2c2329209bbd39d6f7cb95","sha256":"e86efe377195faa9e5f5709ca33a5bfaea418399ec78379d41d34c723a3d3060","sha512":"311f0626f696dff522740af39c1d9aa57ea4b1c569d7614c363493fe0839de04e26ab6bb84c17360e3a015eaca90196d540f02221c47c5ceb281004d12cb205f","ssdeep":"","tlshash":"e92108b7a374c3b2902892a8508bc68c804d1bca5aad0178fd7b4cd034780dc5d8a9db","first_seen":"2023-07-14T08:22:56Z","last_seen":"2026-06-29T09:08:44.833589Z","times_seen":3346,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/fonts/icomoon.ttf?cobna3","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.497Z","timestamp":1782716093497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icomoon/fonts/icomoon.ttf?cobna3 HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://vegas123jpku.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://img.viva88athenae.com//icomoon/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:53 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 2971\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 08:02:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nage: 674\r\nexpires: Mon, 29 Jun 2026 10:54:53 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=pXYngW.oe8RdPsiHZvPmu10GivvqtLaPbI5waeI0mcM-1782716093.5050936-1.0.1.1-iGwJpHiqG_1qvRgUMBDlNsOhzuTeh7BBjN6yMfCmDWoB2q.HJ5cvACUKa7znv3vHistIDgPCyUQq7MiKrhLaYbmFhi8jHZ1zmcbIaBcZCXjeVym2pTdd_RLRiNpghIWH; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:53 GMT\r\ncf-ray: a13305c06e0223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4788,"size_decoded":3789,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"17755c1a595a6cfad8faf64d79bfb096","sha1":"9ff4edf4a135ad92d418eca49cbd5751595554c8","sha256":"6e24331ad054b14d877983c01ab24266e054eff30104645719b826988320b610","sha512":"3f96b5c63d673fa34d542c1b7e6b08b0a355e71529273f41928ec01ed594018f22cf3556b753a41c27719b9dc6c35a8cbeefa09859d9d657b22b21d93c77a0ff","ssdeep":"96:zwvCwULhT2cmh8bj6ZxQrNUGlSfcEvsR2oTbUjVl7ydkS/+nBvQmlPV2DG:0qwUMcO8bjGxQrNU6SUEALb6z7hS/gv3","tlshash":"8aa1e707c336cfcbc026e3b95c94d3824be1ee11a765d3a785484d45b61cba48d717ab","first_seen":"2025-11-19T12:27:30.59329Z","last_seen":"2026-06-29T09:08:44.828662Z","times_seen":1766,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nlc.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.060Z","timestamp":1782716092060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-nlc.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 774\r\nserver: cloudflare\r\nlast-modified: Tue, 12 Sep 2023 11:37:15 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2880\r\nset-cookie: __cf_bm=UCSJ_izNaCgz08xCsOp.DyEJTlnOsTAOZqI0boQX.2Q-1782716092.0622053-1.0.1.1-Pj6sA0zZ9bs6DWBsjn4tmqTxQCM6ivkn53OOBka0yf0SQ43yVws3CijeOa7TgD0KHL1052f0TaRvXYE1UC6LzgS54Hb8K3PqHxox8HdTZBp1B4Wp5diJCKP9Loumcs0w; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 7029\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b76c5223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":1621,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4ae16030e39c50fe715acb250bc81e6","sha1":"df762228c672c2482bce767e507dc74a4689d238","sha256":"e9952f9e2cb2e5fee2a0d0f264d20279d98f115a0decf21dcd7cf1e9d674cc25","sha512":"deec0e6b366b45039d1413f81d5de62895b314de390178b82ea4416845176bd45b5c51e42d57ddb5e90b6ebd496589903bbfa4e210f06d7ec56a57576a74f216","ssdeep":"","tlshash":"6e01752112d154de08ad6dd7eb5adb2013c38b448433e9adfa73788a966c5b08265285","first_seen":"2023-09-16T14:18:22Z","last_seen":"2026-06-29T09:08:44.777234Z","times_seen":3289,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.176Z","timestamp":1782716092176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //interactive-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 04:39:16 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2758\r\nset-cookie: __cf_bm=1yZrbQOvTuXz47q3gKPXh6uAXa6PFUy.c99Ff9MK2NQ-1782716092.178203-1.0.1.1-jVUurzj_Kehww.wLzExognMf85x49fOHgThZaaYtlSjhSBWQkqCzDH6OdCx7cV0fO8AkSKJOCvPgDA5wBQRJlw.TxbrMd9wsjEuZuq2YEH74WlmbyzY8O4q1ML18KiRX; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 4880\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b81e6123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":2371,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-06-29T09:08:44.780493Z","times_seen":2450,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-Slides-20250206165228.jpg","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.581Z","timestamp":1782716092581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-Slides-20250206165228.jpg HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:52:28 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RdZoVBanhYTwjiqihN7k3VJqkzZCpHUxdiTQxa6NlL7jTbsAdwiM4YItxaCz6Q75IaG6Cer5k9Lh6bbNElA7fkdOfbWKRcgM6BBAVv3wInyNjlWxIn0fmqxG8ykGgQPCAgHl\"}]}\r\ncontent-type: image/jpeg\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 221671\r\ncf-ray: a13305baae8c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221671,"size_decoded":222340,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"cc0fcf5a4cc3f5db0100d27f0fa6465a","sha1":"037b818179b047674956390c1bcc27cde3311549","sha256":"96e13458a8976268d321146321847fd2103f97926dac1b2fbb28e6ee199084b9","sha512":"b6812c94cfcf230dca60f9fecefdbfd57934fe168ee8e46003ed90831eba75744dae75eb2919efc366cdfe76a61e6096726894662ac76a4dde9fc346cd8716b9","ssdeep":"3072:tWdAv0OdPM7c6PST8blvrQYMrv/ekcEuof4b+zL6AGX1AIzGoeBgXz3MA0e:tQ40OdPM46e8dy3eBEui4i/6DJzAgXl","tlshash":"9f24232385754bf3e172431c84e2dbc115e8b4e01baa5b887b95a4bdcc7787d0adb12b","first_seen":"2025-11-01T08:31:13.832974Z","last_seen":"2026-06-29T06:55:32.462179Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.147Z","timestamp":1782716092147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //interactive-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncf-polished: ok, orig_size=7983\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=o8Mqn5VMPNuo.5oJfaGUaRfaB6N5hGrIBiVHbln2P.w-1782716092.1519551-1.0.1.1-3uwWsmNB92XN.UABSca9ItFYzKy7aEAbnMlW2trQtsh03v1Tyoej7K5Yqveict93kO0z9a0Xgimt1H6C0XtaWtL1fFgzJ_LsSL9v6u2uI4wfQVMqqCFOfzrGhPN2peW8; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 6182\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7fdf023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2000,"size_decoded":2848,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.782585Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Argentina.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.807Z","timestamp":1782716092807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Argentina.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1590\r\nlast-modified: Fri, 09 Sep 2022 06:10:22 GMT\r\naccept-ranges: bytes\r\netag: \"09b3d812c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\ncf-bgj: h2pri,imgq:100\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxPIn86y2Xb7AIeGQT21ioEhSQaWrLQjzAXSC7sIXh9iHqzstmcuDbjmVFk3KAyZsLUTtRRYER4Pn8iNldiQD6038SkrML8QGGGuKCN7ezRYf0pUdIwagUK0UkjksWpSAGqBBw%3D%3D\"}]}\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 237;u=5;i=?0)\r\ncf-polished: ok, orig_size=1927\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nage: 358556\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=F6JSTLZQNNpL3HNvZc08eenwMSMf83fsmxWQzBbvPvs-1782716092.8090634-1.0.1.1-zcQ3VFJnIS5CaYUpUqY0PfC34qK92tOP25CK8A8F9W50KFiRj5cQ1sPwJGlnLEhl8TSczWJPbsgw0UZeXgue33PWFKh9f7CMNElSRtvzjDxN1bNMly2VUpo9iWalOWF4; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc0aa88be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1590,"size_decoded":2796,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67670eafe688ec61e076b08c671d494f","sha1":"c1a565c1a673191dcc4752dc7a13c73796dfe0cf","sha256":"1d5dc4bef77083d416b4f9cd0c9ecda18dcac02361899ee30cf91b0f592a2ffb","sha512":"652f2bab4cd7b8dafd4f796add9b078abdd45ab09a726cd98a871280c96128c2b871ee4893f8535f228a04646628dd2b3efa47b77b5cd7579eb7de098c6cd96e","ssdeep":"","tlshash":"24312ac01dfb15b775e6807ec2e7da2c480e7384b8bc9aa111710c414e8aa393e6e359","first_seen":"2025-06-29T12:02:45.92696Z","last_seen":"2026-06-29T09:08:44.8061Z","times_seen":227,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-gmn.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.143Z","timestamp":1782716092143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //interactive-gmn.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1766\r\nserver: cloudflare\r\nlast-modified: Mon, 11 Mar 2024 04:30:34 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=dBaTxP1JWDRjwOJyMX1ovG2yY9Zit02Wmq0NlVxVASA-1782716092.1513994-1.0.1.1-QQfOgIUJuWt5bewM7m5pc5tJXrPQ0zBLLa_CDjp9JME1Y2pfKYJmlYcoqlXwCWOG7PizobbC0vz4J3vekGxU57mJwBndZ5b8H4zWSVBJfEeXLLPkpHgP2GtJuygFr8TO; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=4417\r\nvary: accept, accept-encoding\r\nage: 5711\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7fdea23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1766,"size_decoded":2614,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f89632ca3f4d9915c5e398c5511037bd","sha1":"c89176559445f60316d818d55a5a0b24161303a3","sha256":"35ac284ee8ca72f42f9f5fcb5022cf71af19b3b42a02c07c5dccc58ee4bc12bc","sha512":"6a6d96f23fc82a623adad91e1138a335b67b67c92827c3f9dad04bc762ab06ed42b3d598ad4566c5d714171dc31bbf9b2822a0f929bbc5aa4fb3a79821e3904a","ssdeep":"","tlshash":"a631e91c3dc838288746ad953515635bc274579e306dd169b9c59b783e3c0b4de94220","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-06-29T09:08:44.834126Z","times_seen":3274,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesansflex/v21/t5s6IQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4xyRg2eWITmjul.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fkupon.com/widget2.php","date":"2026-06-29T06:55:00.407Z","timestamp":1782716100407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/googlesansflex/v21/t5s6IQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4xyRg2eWITmjul.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fkupon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50880\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 22:07:02 GMT\r\nexpires: Fri, 25 Jun 2027 22:07:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290878\r\nlast-modified: Wed, 20 May 2026 16:44:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50880,"size_decoded":51693,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50880, version 1.0","md5":"242bf1c5586a03eac78190c3ad4b8b8d","sha1":"34a3a16b17a15be7cb502099f39ece5bf37dd642","sha256":"cc6c0d58aecccc9dbeda87a4c03b2e00c1cab531a3b56e52a739d2f09aa09373","sha512":"c0ad3b363ec1b734dac9a79161d7e170f61729a4a8e575f9a503b6f1637720928b3c448cd7de6ce603535f8af275c70522639efccb49b0850a83fe92790bdb04","ssdeep":"1536:D5PFi3gG1k8kgexHooZhGP7hvOm+EhlF8Hs4EJR13EvlC:D5PIgG+8kgeJOxp//WHjsR13EtC","tlshash":"8e330233a071fbebc6d7221d575027baef3d2905736599c17008b414cef61b738a98a8","first_seen":"2026-05-22T23:49:57.434981Z","last_seen":"2026-06-29T09:08:44.792025Z","times_seen":389,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-Slides-20250206164950.jpg","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.504Z","timestamp":1782716092504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-Slides-20250206164950.jpg HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:49:50 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T90aLuPmxikDxGZAAKbdMlRJvTc276fqRHBJVQUnMB4ITuTpCJkapWKvbpDBS26XOltm62rNbtlZzk80EaFKjOhadXBlRfJfRWCCzENC%2B5L1uYNepqToFQ3DUe%2FGaAq7crOG\"}]}\r\ncontent-type: image/jpeg\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 207113\r\ncf-ray: a13305ba2e835690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207113,"size_decoded":207786,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"33005053e6fe91506a4684870136d5b1","sha1":"cc362ea3c718c314a12ab33ebd4b64891bb3b440","sha256":"bdff0ea553f88b943fdc392748563a83717dc8ea9fea7b6128e9ca8992f311aa","sha512":"d0fa5b8e9f14fb30f7310a67739bfae0b91c8e99cba5a9ed6d1c582a91e4196653229e9825821b1d657486ce7ef617d42c5ccc50643e19f03b60838e54b62295","ssdeep":"3072:O+a0Kxff74E21mToe+7O+NbLJSjO4SaBA2IZ0MLCtTb534al5gET7uvkqYcrdIzU:O+refzrrW6+gLS52zMu55nqYmIZ9leBt","tlshash":"e714125e56b0ca2fe1cf23a610ad26495613c18e81f7743f14ae1806273bbfb9d7458e","first_seen":"2025-11-01T08:31:13.804578Z","last_seen":"2026-06-29T06:55:32.464173Z","times_seen":13,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/slider-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.620Z","timestamp":1782716092620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET /banner/slider-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: __cf_bm=k7I5b08JrU0IhvvI.MhI3V4tQBnqH9xUXYxUI__Ni3U-1782716092.1248164-1.0.1.1-8O33mbaM5nybCjHdD224sZjjMMoYXg0s4He8QiL25U3XXnMkB.CVUSZVSQdNDhrzyZC0d7KZ.Skn8Fcrcxnl3SqEVTyfBP_MihhP8GXbkpm9QgUbJtQ5bY5orDkIsUk4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 503745\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Jun 2026 05:26:21 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: webp_bigger\r\npriority: u=1,i\r\nvary: accept-encoding\r\nage: 995\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a13305baee3423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503745,"size_decoded":504252,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"021f54c2efdb4edfdc2c3fb292165642","sha1":"bbbc5d0929340565d101f6296da041e544e65dba","sha256":"ee2df9dd560c15ef2c08bbfd3b86ab92660898e81e3554378c968e95ab678d1d","sha512":"6083b7b4ccfc76c41be921fef4a7a6894508670207d52ab7f245768df40cc50b9c6f100823db5aac45b0aca7335031187c4bf0e8bdb998ac5e468bed49a7274a","ssdeep":"12288:tkyNxgJ3R8bO5S7IEULzDahwxt2mqxV4m5MXpT8Nijzm5sT5JC:th2C2EU7GMXpT86mGT5Y","tlshash":"58b423caaf16de2ec27105d6137dc379392293d61fbc8e742d8b0db479ab118a8f8144","first_seen":"2026-06-09T10:26:27.147819Z","last_seen":"2026-06-29T09:08:44.804129Z","times_seen":178,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.099Z","timestamp":1782716092099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 794\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Dec 2023 07:14:51 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=mSbCD_1FDJqYx1WlItoXSY17.4nI2Uqcdts7cikveqk-1782716092.1009462-1.0.1.1-ruRF3rDCyCzd3H6Bi5KMmOD9JazduxQuaOqJyFfdW0BaM_Z60d26K0thGM_KRV8vJfaaKpa1yKnNcQnGTnVSq7mAS_pCBt4w85MGgbwnASGtc3xW3nv4fNsNoFjXxOv5; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=1595\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 6662\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7ad1c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":794,"size_decoded":1641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"041b8eeed633afc9d95344aa6e28ed7d","sha1":"e42388794c68fe2b9282cbfe914b057c58fca502","sha256":"5a2a23b2d0c30c3938c1b279922c8fd42659a06a6a55f5f3f94b6f69f1ec544d","sha512":"aea1d59ae0cba007c99972fc9c18b389facb46c266af985b973e76b6c53bdedad4d38c953d59bbe080142870875bf2fbd202861b30560ec60fadf7599f521f8b","ssdeep":"","tlshash":"1f01419c2da5560e5e5434ccd774a0a0640d7e0551091da3bb04ea56200e50a1e49c19","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-06-29T09:08:44.824234Z","times_seen":3278,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/England.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.825Z","timestamp":1782716092825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/England.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1264\r\nlast-modified: Fri, 09 Sep 2022 06:10:23 GMT\r\naccept-ranges: bytes\r\netag: \"80319cd812c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkyxjnAgs%2FQx49GVCRY%2B7ASr8vtnEGbFKBBzA8n4QlVl7otzbOEGWzfVW0nxWmnibMo05Fd6tMe7r9RyBwgnIydJDNg41DCCrGZvWI1YmYB%2FkeqkpuitKr%2BieK5pc5YXbYjJ5g%3D%3D\"}]}\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=1530\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 195;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 267536\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=hgJWbLtBhN5cnVT6eBWnCplDbPOupLdO84PayWHaDMQ-1782716092.8263426-1.0.1.1-.U3cO9.jWKMBLXxDLYBnFwlb13h7ishyWuB7.ngmswyYe61DogyfdwECO2sPut0EPqE.NS3zOnJnH2OBkfsZv7bftBPHqCbiUirDoQT9Ja4a1ZnSIkXae0JL9VCHVcuB; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bc2aef8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":2478,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c568dabe8daa78ea776760184b8a5113","sha1":"281ed427f8eedc0b3b7f2a136deb71603fddb360","sha256":"dcefb33f5d7f7a1e6fe598fa4ade78b833393604a9650cb60938718d602a0535","sha512":"94704440ceaa9a30151a1872555bb18e69393baabec45807a22db461c002250f22ca4784e0a4204a7925d102058d9c817a2945b4e8c0067feeaef9ed559738e0","ssdeep":"","tlshash":"90211a27d4348c1eea7688559f83bc3331c8ce40ff855984626364584742484ea28be6","first_seen":"2026-05-17T21:10:52.776383Z","last_seen":"2026-06-29T09:08:44.781019Z","times_seen":162,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-all.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.114Z","timestamp":1782716092114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //live-all.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2548\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Sep 2020 10:34:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=g_9rzGKim4yOskAWdhRPHGaw5PTM1WDiFhWZcF2ubvk-1782716092.1157277-1.0.1.1-gz5xx8o5VZb0QRVnpqym2iomKGE.NfH83n5BEmY4NVxB4LH6qgOuqbUghiowT3gG2fQn1O0woZA9YN1kVHGY0v_8TBf0hVONiu.jDlUllKXI88MoaUkwcB5h9x3IvfIa; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=9511\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 258\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7bd5523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2548,"size_decoded":3395,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80ab66e968b68828f745dbd67b94dfc8","sha1":"18d70a225ba9f5c51d79d286178312966d339f76","sha256":"bf207416b528a9c36145e5943266d17c909af991f3512d62636b85eb8232ab5f","sha512":"6fa79f44200fdb6f99507cdc247bef76c2148d722ca90fa1b2f91baf303897536fd4e73219f2e27364f2366c7e4f4b87032afa0aac9ccc4e782f432789793a5f","ssdeep":"","tlshash":"2a511a6e75e3673f492ba83709e7aa4509a02a3a0800d02f53fe8041f39c61a6116a67","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.826301Z","times_seen":3369,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-prag.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.046Z","timestamp":1782716092046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-prag.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Apr 2024 09:40:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=Xrth42dHaUIJN6tQPvT8CeaOaZthjGT8BoziBL7S66k-1782716092.0488265-1.0.1.1-6HqOHBKAOeCWd7JEo6.DaU9h.Rr3LsSmea4tW7QAGv0CdwsPJR6F64hiVMEMSnaB1AR2sf48ScqffQANk5CRidcmmXhKaq7mHgCGd7_RMjlYG72bU.tn5U2YrWtwQfSI; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=2903\r\nvary: accept, accept-encoding\r\nage: 2121\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b74c1223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1564,"size_decoded":2412,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-06-29T09:08:44.772249Z","times_seen":3307,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-kupon1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.042Z","timestamp":1782716092042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icon-kupon1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 536\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Apr 2026 09:12:40 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1461\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=N3bu7M8DLfTo3.PajRlIVNPLxzLysCyGhjFqOZ.bCW4-1782716092.0444717-1.0.1.1-iRC49BEYM.ovtB6d_HBo44_LzqQ0lLjGlWfIhP7gI_vQGqYYBF9FJEYkkEBJFyd_qEGXi.2a_Fh5qyT.S2sWGvj3wU3Y71P9y7zV9r2f9WL2Pt5I_2hWuGK5TDIRUTgK; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 5067\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b74bfe23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":536,"size_decoded":1383,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"675ca5eea33e82d22440358d48559ffc","sha1":"badb30484397d883881ade5782e22940b2cd4005","sha256":"10d939985e8cc3eb3aa7cde6b348ea339f3a320237c06a2d022031fc4f374cff","sha512":"2aa186d1268dc6c98b92cd6464fc9095fe06f1aa1fbc6f13b7e73936c695b3deba49dc88c317df78aba255c6741c23c06b0b8d148b72845d1a76f8e0750746f7","ssdeep":"","tlshash":"16f0202e37aff841df69e4045abacab3128881da860a6f3a52819baa20a0b00441350d","first_seen":"2026-04-14T04:32:54.911594Z","last_seen":"2026-06-29T09:08:44.832991Z","times_seen":876,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img-2-2.cdn568.net/images/teamLogo/Brazil.png","fqdn":"img-2-2.cdn568.net","domain":"cdn568.net","tld":"net"},"ip":{"addr":"104.26.10.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.659Z","timestamp":1782716092659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn568.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 17:32:54 GMT","end":"Fri, 14 Aug 2026 18:30:31 GMT"},"fingerprint":{"sha1":"ED:E1:C2:92:9E:4E:A9:F0:5A:60:7F:7D:A6:84:7F:8F:9B:D9:6F:F8","sha256":"D8:83:29:69:A4:43:34:38:E2:5F:45:60:CC:F6:DD:98:2E:18:0A:AA:93:CD:30:19:11:86:DC:01:94:AB:A1:73"}}},"request":{"raw":"GET /images/teamLogo/Brazil.png HTTP/1.1\r\nHost: img-2-2.cdn568.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1852\r\nlast-modified: Fri, 09 Sep 2022 06:10:23 GMT\r\naccept-ranges: bytes\r\netag: \"80319cd812c4d81:0\"\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM\"\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 290;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MK3%2BPgL%2FzhluddQ4Cdb5%2FD1AAlk9%2BKLRmwNfwOE6JY1dCNik8N7SRfykfJcX67AjsG4NVA0aF9U90CdqHVt3lSuOcWVK5aBrm0MtqxmY2GNrYVpZ%2F2PDLRHISNLzHo7sZEd2nw%3D%3D\"}]}\r\ncf-polished: ok, orig_size=2188\r\nvary: accept, accept-encoding\r\nage: 187473\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=3q7sGPcEhui86KuYXfVlG.YVPBdEyNbw1TVomDAvUPY-1782716092.6818562-1.0.1.1-IQaEglEW9R3HvjEyGHGsTZd_mw6x444dQstOF6HRz5pdvEfpQxbUDesJwCSDuy.2MUHXrwRoUE7N8Lzj1zaJlmGGt9OYP3M_LJixTR8RJve12Z5Je77Yn3mTMnvDNDWp; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn568.net; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-ray: a13305bb4fd58be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1852,"size_decoded":3068,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24bbbb1e8162730bcd2415822c33e618","sha1":"6366f46580d0e1069da332b85243a733bba1fd51","sha256":"406fcd4b8fdedb112a2934083b02be0434301a4fd4816b4401cb524ef85c98bb","sha512":"fc286903bdd8d977abbb2e8323b4f4762a04b9844a0f498094d9faedfeeedc20cd7a050bbab3daf9db6b77070370130d48b6a9ab083a9076176e37a12cb7cb01","ssdeep":"","tlshash":"4c312b3063624880ae8c35422f62d9ff49106637e958e2496bc27fbda4f8d9777e00c9","first_seen":"2026-06-06T07:56:52.71273Z","last_seen":"2026-06-29T09:08:44.845016Z","times_seen":158,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":8,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ik.imagekit.io/pwwc9yn4c/Telegramlogo.png","fqdn":"ik.imagekit.io","domain":"imagekit.io","tld":"io"},"ip":{"addr":"143.204.238.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.865Z","timestamp":1782716092865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imagekit.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3B:8A:6A:40:5B:EB:4E:98:B8:8F:7B:11:50:B7:82:1A:41:96:CC:CD","sha256":"38:E4:87:60:37:CC:3A:5A:FC:01:83:79:F1:F0:17:D1:2C:40:48:94:55:FB:CF:49:8D:0B:0F:6F:6D:D2:34:C0"}}},"request":{"raw":"GET /pwwc9yn4c/Telegramlogo.png HTTP/1.1\r\nHost: ik.imagekit.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\ncontent-length: 10082\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: *\r\ntiming-allow-origin: *\r\nx-server: ImageKit.io\r\nx-request-id: 92f6df76-9b36-432c-b7e5-3b684a622f3c\r\ncache-control: public, s-maxage=31536000, max-age=31536000, must-revalidate\r\netag: \"b3e710156a1b08b4d561588a79f8fbe9\"\r\nlast-modified: Tue, 31 Mar 2026 01:01:11 GMT\r\ndate: Fri, 26 Jun 2026 08:38:48 GMT\r\nvia: 1.1 bfb5bffe90e3b0e760933a7a07d850ba.cloudfront.net (CloudFront), 1.1 9a21c1acba3e1e78a8f3c7a89ede6be8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P4\r\nage: 252964\r\nx-amz-cf-id: g159OnOjy10px32qIde87VBuNNHTRH3I26lwmkn_ycEi6bjNZSFxAg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"ImageKit","description":"ImageKit is a real-time image and video transformation, optimization, and delivery service with built-in digital asset management, powered by a global CDN.","website":"https://imagekit.io/","common_platform_enumeration":"","icon":"ImageKit.svg","categories":["CDN","Digital asset management"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10082,"size_decoded":10866,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3e710156a1b08b4d561588a79f8fbe9","sha1":"1f01ccd76977e8bc59906e2c83f7d745fa97d56e","sha256":"81ad97082380bec834549e3a0c0040810b3139a58185563c2b99944515372978","sha512":"9cd153e37da19f762a6c33643f39759ddfb466fcb99c53713c0631ceff7eca4be297efecce45cb6820b1a207d5f41ba27f5d192dfa1cc79a715cbd26aab8ff7d","ssdeep":"192:S3YzbU5vX0Fe63pVsKgAsxJKDV3a2UTs2HZCrsCgWvkL8Zu/:S3Y+E9pFsxUDV3aCFNq","tlshash":"5922bfa2b44c8b84a1c6e6ac3ac871c9ab1ed3779c5620c4f874a2f15e6cf367578940","first_seen":"2024-09-19T22:40:01.924884Z","last_seen":"2026-06-29T07:01:41.270406Z","times_seen":14,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T06:54:51.102Z","timestamp":1782716091102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:51 GMT\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0; path=/\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1iZHeECMBu%2BYnCRb%2BP5956ssdL8qlAwL6PPGIo3XbS7yZ%2Brn28kSsEVfP%2B4rDUhIKKR94Ka9jICFZWf%2Bpl3JTDWnPpO7BpYROaEuaEsHcuerlr%2F77wWuK6XFZYElxLOk0QT\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a13305b19e2c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":330554,"size_decoded":36867,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (514), with CRLF, LF line terminators","md5":"287ec1f9179655c9f441e585487f98ed","sha1":"ed0d47e2b5bbd41c38bd0f3199c9bd09e3019c79","sha256":"a947c3e7d5d2b549e7ece17908ca66edf1a65baf8961c2a426dfcdedfa3e70a8","sha512":"5862b6cf0347f7c25b69f56dc5db2486dc3e539903032ab2e99970ae97c52217da8a1f55ece913a173642c11c9a8060fad042723a0b208ca96e7f801dc3e1152","ssdeep":"3072:VNmwrZ1VGlPoRPnw2Ht5bl7qUpOs46KrHK+Mx:VNHTVGlPgPnrHHbl7qUpOs46KrHK+G","tlshash":"58643f2140e1106361b3a1e0ab725f0aff91d607ca0b8a0476ed9bd65ff3d56cd236ad","first_seen":"2026-06-29T06:55:32.46913Z","last_seen":"2026-06-29T06:55:32.46913Z","times_seen":1,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":6,"connect":20,"send":0,"wait":388,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-sdl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.056Z","timestamp":1782716092056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-sdl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 586\r\nserver: cloudflare\r\nlast-modified: Mon, 04 May 2026 06:39:32 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=CbkVl6YgNgMv3ba5PeJ3bMPKQLWKiQ7KTpttxuMwk0k-1782716092.0577204-1.0.1.1-xEXHllScdjn2CI5QggSyF.vItyGknO6Gtf_NkBLGri_OOTaJ_kW1ciKW337ag6N848t4JUVkrRS9G_slJZzkfAFYRQpNI4c4F8FpmvFk.JoVzwqyRA5SE6QbryGehulu; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1253\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 1908\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b75c2f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":1433,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2754a8148a4e553fdbb63492bec645f0","sha1":"9db57ed1d6256916a61d856b8c7c21484d439b27","sha256":"eb50be251aef3eb35e8b675fd69b89a52c97b9cdfa364f67425546a5b4e5d558","sha512":"0c98537f16071734816139b881716b1e50b56ee1a6a8b7d4317a80fe04e49e99227ec1f854cd835f6a8e3e6883b6453470f257ffc0fde8152c01e1d962913f43","ssdeep":"","tlshash":"d3f04181e1a04201097ab2bdb5a9af51208314a1c897bd30bf20d96213ea41c96791d8","first_seen":"2026-05-04T07:28:25.333902Z","last_seen":"2026-06-29T09:08:44.815175Z","times_seen":671,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.201Z","timestamp":1782716092201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2836\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Feb 2025 05:00:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=4p0jawQx7umM3WbBJBRlnV8TSlMFI57hmZxiXwNgh1c-1782716092.2025006-1.0.1.1-Lq3pNHVWIKa0sRUuiGRNWz1GzSlkQbqIqjlPwB8.X7.szBVJQ3x9ZYtTPcBKfQCHCzedMG43i6hWeGub7BeJxg.zxglhgvCW6Ye9396Q6.bLJU6ONAIT0xIo_8WAgVhx; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=3881\r\nvary: accept, accept-encoding\r\nage: 2653\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b84ea123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2836,"size_decoded":3684,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40e64453edc6a67b90ef4c57a48bc37b","sha1":"710b350b599a185717514a7e487819741d8c64c9","sha256":"4156ca22a91808f35d7fb2f49daf3a58db2e03489358b4998caf039210e28d27","sha512":"cdaf75fc547433774eb0c20ae8e35375ec0a3bc4fe1e5056b2fc5cc1210ecb6d215544c7d6a4a067bf3fbc656cfbcff56eafd9b5be1a8bf41026b2ac73b1133a","ssdeep":"","tlshash":"6c516be5d8f39ba8afbd0005dc3ecc1809b120810deb21079ecb03aa06871a4ba53c22","first_seen":"2025-02-07T22:02:30.786218Z","last_seen":"2026-06-29T09:08:44.811379Z","times_seen":2311,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fkupon.com/widget2.php","date":"2026-06-29T06:55:00.424Z","timestamp":1782716100424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://fkupon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 07:43:50 GMT\r\nexpires: Fri, 25 Jun 2027 07:43:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 342670\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13768,"size_decoded":14581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-06-29T10:39:51.081384Z","times_seen":10142,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.087Z","timestamp":1782716092087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Feb 2025 09:16:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1967\r\nset-cookie: __cf_bm=A3_Vo5sjzQfm_us7Q9qtAoiEUyCiqXkxV2cs7uBBIzk-1782716092.0886862-1.0.1.1-Oyzw9WNK9DW49x5O3BLojSzLPJ1CUtMqxDRQjmw_8hnFFPANzClJK0AupBeZ8Jl5TmNjjJ.Dt3qrDrjRPWtS1j.yKlmgKJ1bFPNNUZjTi_33TcE9b7UUJ2FrfVpPOdIu; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 3760\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b78cde23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1132,"size_decoded":1980,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-06-29T09:08:44.801653Z","times_seen":2779,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.091Z","timestamp":1782716092091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2786\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\nset-cookie: __cf_bm=JP6nRSVRhyIiiA2k6aXdeuAzjQzWk2sD4mRU_1ULJhs-1782716092.09284-1.0.1.1-fivXiKDE99Idimfmjy.D0prI5Wv4A35ZU76phlQy4yTldn69Hj_qBhDul5mAc1QLfqqrgRyakKPH3dmCIT1BrwAr8u8fYidCYSNZn9OMHUUaMAm7C9f8UZvUXVc1fI5B; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 2185\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b79cf223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":2418,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-06-29T09:08:44.824751Z","times_seen":2636,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/images/logo.png","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fkupon.com/widget2.php","date":"2026-06-29T06:55:00.366Z","timestamp":1782716100366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fkupon.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 07:26:04 GMT","end":"Mon, 31 Aug 2026 07:26:03 GMT"},"fingerprint":{"sha1":"5A:FE:38:7D:07:E7:48:A2:96:DE:72:83:0F:50:20:D8:64:B3:74:98","sha256":"A1:7C:D5:A2:16:8D:92:41:D9:2D:56:44:94:49:4D:1A:72:2B:CB:60:DE:83:9A:8C:E2:28:02:A4:8F:7F:C0:F7"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: fkupon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fkupon.com/widget2.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:55:00 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 05:20:42 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBAXbOKijO4tQwBNvkc6pvHcAnYqKKKYAeSyI%2BoRjRaqGQ2Bkc8HfZMJTUB78uxI%2BKF8JN1FZZsP6JiHfFxxcB4kI18visWqP%2BXof7oAYMnhzHIAbZIkvOwb2ofo\"}]}\r\ncontent-type: image/png\r\nage: 1169\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 32346\r\ncf-ray: a13305eb49bd712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32346,"size_decoded":33012,"mime_type":"image/png","magic":"PNG image data, 1402 x 530, 8-bit/color RGBA, non-interlaced","md5":"088707efda21e9c3b5b88ffd840b506e","sha1":"0a9adca5e4ad442ea57f6f67663c67ae5c2e28c7","sha256":"d48fbeed2e913efafb118fe6c973a4ffe70d30f5e77403325d5473c4f7b50bf9","sha512":"71cc4b94e0821a842e3006db79d2a9eb1e0d61739608f769941079151d28f1501dadae366d57dc82dea99e7915ce8c6f9e20fed5d814c69edef46270f6d99985","ssdeep":"768:OoiwvJSVtbtAXjtABsfNR+OQ9wdO7tFvO9pSx9m:2whSfbtAXjtAefNR+OQ9wdsFvOv","tlshash":"23e2e1bc1f8c8c00c1b150fcaafa81d315aa7f1b5151e5cab1759c2f9ce2d06be74298","first_seen":"2026-04-17T05:54:49.138927Z","last_seen":"2026-06-29T09:08:44.788256Z","times_seen":676,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.151Z","timestamp":1782716092151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //interactive-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\nset-cookie: __cf_bm=f9dny0U4Q18PVhno7nc6l_4i6T6yKgF34u3_L9yMwoU-1782716092.15466-1.0.1.1-Ni4ydxU4XrSAxUcV6UQU0Hgwm3pRIhaauiRYbgxn4CEnFCHdVg3j4JRhvJ9Xma0M2Byitx_kwC8HudLA2NDiCCmCvdusq_NpAMANFWP5Jo2l7uyVumFKnyRQjlbRpR6t; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2786\r\nvary: accept, accept-encoding\r\nage: 3280\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7fdfb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":2418,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-06-29T09:08:44.824751Z","times_seen":2636,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-saba.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.120Z","timestamp":1782716092120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //sport-saba.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1770\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Dec 2022 07:31:08 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=Dc9yi0Lh.4AadzF2ahhmtr.lNWg9QKhaSxe_SY60xuI-1782716092.1230397-1.0.1.1-qFQGw6_dnzXYpKsCscv9pRvA4Ov6R5Ye4LBz8aI3gK9ZOz0pgS33n7jtZFljjHw1R5GsteJC2CsXgC1Pl83UBPuK8598kBHQENjUdQHuT1p00IOjcgEUWNbGlbPW6HXK; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=5247\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nvary: accept, accept-encoding\r\nage: 2931\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7cd6e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1770,"size_decoded":2618,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9dc335c8ab6468b47a49e492aa97af52","sha1":"e8982a717f2557a1242a1dfd4511ceec6b47cd70","sha256":"277b290785f86422c338396b72410c9dfb7f0672b608e6808f41365b3579f26f","sha512":"1fe4fd928f064b203b3f55039e8fe0a6f6b86084e50e2535b9d03e2a009b674ed638056c6145fcc9b99a3df4dd7b787b657f2396ff8dd56f8a0907d1a3dfcf29","ssdeep":"","tlshash":"7b31e9b9bf1f80f8493220554d34957afc9b950cd21f2d13d2ab1be4460f6aaae22cd5","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.818744Z","times_seen":3371,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sports.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.213Z","timestamp":1782716092213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //icons/sports.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 648\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=uHIEAQD35h80QkJNLqQw9X81isra4AAEruZe5V46oQE-1782716092.21465-1.0.1.1-rRXZiCjIO6oIDQOzxJKDzlIKBNtllxsO.cR.8C3obzyFglYYt.DQFB1iOubQXdaOMH4qqrzKPm_n6ZbY2j2G7wOjkvuZtPO_.Celkf5GV01jCyWR9HhrqK4BfuciqtNb; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3789\r\nvary: accept, accept-encoding\r\nage: 4033\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b85ed223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":648,"size_decoded":1493,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d70a305bde0a2cd5afb3d14c5055235","sha1":"97b47a1a205c9c3759e2aa0e7d42a8eb8c94a691","sha256":"62675e8d3f1ecf4c407ec5d846e07f842347e69f44835c5612d23c61f0b59577","sha512":"7fdd2042c9efb3fcec6b93704328103112be80bf2e10030227ab1a5906ba6d30f4675b89f025d8186353a9e6a72ff3c99e3941ff9260d1e90a46012db530ca37","ssdeep":"","tlshash":"d2f0c280c300250f8aa41d8ca74ca42e4360ab82167c712e03832eb473ed10822b0270","first_seen":"2025-11-19T10:28:57.200422Z","last_seen":"2026-06-29T09:08:44.807966Z","times_seen":1796,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-av.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.092Z","timestamp":1782716092092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-av.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Oct 2025 06:38:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1284\r\nset-cookie: __cf_bm=8AJsHHDoXpjuHNTzm7E6iYazyhStgTq8PhCs9B3uhkg-1782716092.0937414-1.0.1.1-tEFXLE18W6qycUrE0MxBwEtFkZO7q6KujLJ_luaVTsZhnXtKs6gaaQc6_UJQgGt5RbTX8_2Iji55T5FDi14Y70daAnD7nKlZfIEtmp1178N4Bxs1I0o2MzTjw2G2FA40; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 5790\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b79cf923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":590,"size_decoded":1437,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76044fc8943ec031dc01d35bf3ce3b6d","sha1":"8f280e5e155b32963cc71c6aa00e9c9c32a54120","sha256":"1f5a41f74224cc8954664489b76cc5553cd0c8d5dde133cc48b62a8af296e40b","sha512":"1e2916804e5e220f70a2f39a2184b97a8a090b1f827abf8732f81d9ed49df99719709d4d19887d8a3fbf5c47c3f36dacff1a244dfe2fabcaa90b14920567927d","ssdeep":"","tlshash":"caf041c577bea8940a2674aec642aa473843244cc1818b56ddc394906d43955e286c8d","first_seen":"2025-01-07T08:32:27.13192Z","last_seen":"2026-06-29T09:08:44.840353Z","times_seen":2791,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/logoweb.png","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.204Z","timestamp":1782716092204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/logoweb.png HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Sep 2024 03:17:07 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9WRoFNa%2FWeTmbmP8mL3k9x%2BeLWmYIShOhOkSmK5EZPeVvBQ13UBkSZMupoKDYyIHUjAvWs%2Fa5wsL%2F05LPoT%2BCd1%2FzSUzGlTluUIZLbti4u%2BBitxr75ZO48s5qYD3CwJ25zt\"}]}\r\ncontent-type: image/png\r\nage: 672\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 66318\r\ncf-ray: a13305b84e5a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66318,"size_decoded":66999,"mime_type":"image/png","magic":"PNG image data, 379 x 148, 8-bit/color RGBA, non-interlaced","md5":"a8d11469d5f4abcfef1d52f7f00b8dde","sha1":"0290d732847295313481a3874d73c4045652173a","sha256":"a800e7b7b5d338e001fb33d8e100e1495db2866709d0fa408d32208788bd0248","sha512":"f4758f890b2b9e5d5c6bbfb62992e516999fe19758c6bb5dace27c855373a5ed37dfe11e6c3def689d064a09c56054f72b5433bf5ef43ec27edf9ea034b940eb","ssdeep":"1536:IJEoRptQbfq16xQHglG5z5pA6HYjJ+MbcLqjVhAr2t:iEbbfq7AU5pYjoMA4P","tlshash":"c953025cbc09dd44c56baa215a9b501a5f33fd8952b11fe0f187ce8c5a1322de0eafc9","first_seen":"2025-05-28T13:20:26.430748Z","last_seen":"2026-06-29T07:01:41.313838Z","times_seen":115,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.096Z","timestamp":1782716092096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 04:39:12 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=2758\r\ncf-bgj: imgq:100,h2pri\r\nset-cookie: __cf_bm=lf5jSR_wvKiPR92edkjoOvARKL0evCgYn0i6jOFSwF0-1782716092.0981004-1.0.1.1-3MAYMzvpqf8EIHmWS2BQi_bG5_oZfpyfDuGqocXaJ3D_.Fb5vbzRkQ1i9SN8cy.JEILTrhEDt.Qdyb.dVLmVml93jfdV3vjMrCpZ4SD68tgL4rjDpK0IFodL1xLRdW.B; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 930\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b79d1023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1524,"size_decoded":2371,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-06-29T09:08:44.780493Z","times_seen":2450,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/assets/24h.png","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.868Z","timestamp":1782716092868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /assets/24h.png HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Sep 2024 03:17:07 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrxCAXdY2JR46B8Gh5KHZC08slWvdUqsLbheX8AQ3TVzXz%2FA1sE0iHdL%2BXhchjm8IcSMy8KM4YOxZP6ijkCcHwxytnZp%2BoJ8Sxw%2FBqnr8Vt5aYQFfnP1g1W7cTiGokD7Qh7P\"}]}\r\ncontent-type: image/png\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 11955\r\ncf-ray: a13305bc7e975690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11955,"size_decoded":12630,"mime_type":"image/png","magic":"PNG image data, 193 x 122, 8-bit/color RGBA, non-interlaced","md5":"5b0a3d535cfbcabd0b37960167c67ed8","sha1":"622c2616c39007e70e676009afaa68438482be94","sha256":"7cf851a08a27bb68c7b4176852fe96a0e09593d85e7704c2acd862660de8ca62","sha512":"defd5cd4950bcd971144bb8218911da30c97c94c51916a5e1a618084ffee88dc8eba8148b4bcedbbb8e76f0c52cbe0f1a08333a829c7200d195d5bcdeffe1044","ssdeep":"192:8wzGVKv+l9Db0bVj6ugjkiKAUjAhaXA3afkbNaV/8mmHT+8Av1z5lX:8wz1v0DYi1aOacukdg5lX","tlshash":"2e32cfae70e1e0f93ec0a87a806617837892e90695500bab43e4c1d0f7f7f648794cd7","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-06-29T09:08:44.83868Z","times_seen":3802,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/pop/mobile-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.657Z","timestamp":1782716092657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET /pop/mobile-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: __cf_bm=eIIUIMFRWPywk4dcmNl3B7LfN1AHCNCy.ECtpfj87qw-1782716092.1325588-1.0.1.1-rpIdPtVPzUjhGNw19mRYe2P9qv1BducNIJJ7P_Xyhz5lF7FOMpnCED5yRUPjcMFUrhvL1hqA_pGT7gYrdVp97rYMPavcm_JvXb4nckqIYkOWYiTAEoZVVazJAD65LRX7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93157\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Jun 2026 06:43:13 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: webp_bigger\r\npriority: u=1,i\r\nvary: accept-encoding\r\ncf-bgj: h2pri,imgq:100\r\nage: 431\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305bb1ec923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93157,"size_decoded":93663,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 600x200, components 3","md5":"7fab412c985645677eadcc41e79de4fc","sha1":"a4878108bc49e186775b50cdfb7728b433dcec75","sha256":"42566b7f18921cb10047b720b18b4546ec1319b25e88bddf97c79c8277462b55","sha512":"a804b03268536fe183403c74571aa84c69570ff9cf308c5aecec70af7efff697d68a55a99392c7d7ac103190b68d775a1023a715b240f673c3705bc6cc1de5bd","ssdeep":"1536:7+AJa/VTPU27wPYb7YFBt++3sFF4rww6CK/seYxxBAIr4GM979ihJuwMLACQ6rBa:7bSTPUCcBtp3SF4rww6CKcj8GM979ihH","tlshash":"a593120fc7468f3fec2b7855341aeeb6890d9ae800a79d3286b21fe471933511668f0c","first_seen":"2026-06-23T09:26:13.748915Z","last_seen":"2026-06-29T09:08:44.771613Z","times_seen":65,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-cmd.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.123Z","timestamp":1782716092123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //sport-cmd.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1426\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Oct 2023 10:43:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=k7I5b08JrU0IhvvI.MhI3V4tQBnqH9xUXYxUI__Ni3U-1782716092.1248164-1.0.1.1-8O33mbaM5nybCjHdD224sZjjMMoYXg0s4He8QiL25U3XXnMkB.CVUSZVSQdNDhrzyZC0d7KZ.Skn8Fcrcxnl3SqEVTyfBP_MihhP8GXbkpm9QgUbJtQ5bY5orDkIsUk4; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\ncf-polished: ok, orig_size=2527\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 539\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b7cd7823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1426,"size_decoded":2273,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82295774a82a60a2bdf65e81aa06d97d","sha1":"ef420e886ce432d2dad7afae92992400eed77aa5","sha256":"532c5913a005178af2df0eeee8f64033b4ea49287a7eeed73b16b10d82b1b142","sha512":"d3fc69268e8c0e28191a4d5b5e78e81dde311ae00c46fe7d9a34ca60ea4c00295a765ebfa5fe914e9aaaf83007d2550b6253793e54ac9d64f63c7393835ccf9d","ssdeep":"","tlshash":"aa21e679bef8a5f10d167314b27ce200596394841c49d7e880e37b108470a5236bc1f5","first_seen":"2023-11-27T08:55:50Z","last_seen":"2026-06-29T09:08:44.835717Z","times_seen":3282,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-atg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.054Z","timestamp":1782716092054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET //slot-atg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1210\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Jun 2026 05:24:08 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1987\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i\r\nset-cookie: __cf_bm=_L1ZeEzN5kZz1pXc.Rjb1hgFRqM9k73y9w9b6pSzNjQ-1782716092.0562599-1.0.1.1-oEE6ZMLo_UMbhYfP8brkjjTWu8W6fIxRx1KGLZuKF70sEkOR3qtuPii7.qREd4Tcb10nDl8X9mkmBLiTLeKAVrdlfgAHMaORfKEMce0rWFesD_50qo4bGqrgVrOJCYQ3; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Mon, 29 Jun 2026 07:24:52 GMT\r\nvary: accept, accept-encoding\r\nage: 4813\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305b75c2723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1210,"size_decoded":2058,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1950d336e4ed9c580dd1397f29338b21","sha1":"fa5b47625adfb510e49bb99162c6c713ba24c44b","sha256":"30d28c7dd280da6ba04971e4d07dfb2706b60328cdfe464f404625567a65dc28","sha512":"8b160dcee8e9670ec5f20f720439335cd49b428e1a36e3e311907f1e24e1eeb43fdc7e3a1446c1ebdd6e2e119f63b5081229336eb6ca08f6da6b10bc7e89160c","ssdeep":"","tlshash":"00210d8e6cdf666c8b207350058dd0b1e4058d411d27a0cec2588f4e584fa32b34d061","first_seen":"2026-06-22T17:30:53.930319Z","last_seen":"2026-06-29T09:08:44.805604Z","times_seen":67,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas123jpku.com/images/upload-Slides-20250206165140.jpg","fqdn":"vegas123jpku.com","domain":"vegas123jpku.com","tld":"com"},"ip":{"addr":"172.67.163.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.540Z","timestamp":1782716092540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas123jpku.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 22:28:15 GMT","end":"Sun, 20 Sep 2026 23:28:13 GMT"},"fingerprint":{"sha1":"D5:6B:C5:AB:13:B2:C3:BE:CE:29:49:F7:E6:47:F5:D4:89:E1:F8:E6","sha256":"49:47:05:2F:39:F1:B6:23:D9:43:12:EB:85:4E:A0:68:44:19:4A:EF:1E:E5:6F:C7:CE:61:BE:D7:49:E9:7E:FB"}}},"request":{"raw":"GET /images/upload-Slides-20250206165140.jpg HTTP/1.1\r\nHost: vegas123jpku.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: PHPSESSID=fdb74e902ee206c5adf7408e8a2641e0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:51:40 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0qNWFI9fGyu%2BsM99ECmf%2FDwUEPGm37l7RV0eX0l1mr2yZwztkFzmS6hvRGXTq%2Fsv5hb%2BvzMkYYaGND13qlO2G9%2BXB%2BTdI1w8vMbtQLOkASUFkvFgZwniuzsjFqC2ggf5UKiq\"}]}\r\ncontent-type: image/jpeg\r\nage: 673\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 193744\r\ncf-ray: a13305ba6e895690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193744,"size_decoded":194425,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"bafe823276feadbeb38c6c5fb58f2f44","sha1":"bb7e214f5e598c1001bffc1304570dee563ad74b","sha256":"39f02f79e108534eeb8a23afd191fefbbeaebf13276e356fd33deb3a93113c7a","sha512":"8d9b724769a314b47983b1c75e9021c6b39f3b342fdd0d851c6f0e0412ad96ec89b26a72dd8d559e822cdb2ef83f13a1d0b36180fea60cc11faa647e8e625826","ssdeep":"3072:8tuPY9T5lzJI1OqGr78++ADBUNb94FK+6Rislz8Shu9fcv//KFE0oGvxi4V0eEYy:8DioBX8++ADBUNb7mS0M//Ky0N4Oe7","tlshash":"da14126d7a280e8059c834430f0ebb8cf727518cd47566f95b421b64bafe77ae06622d","first_seen":"2025-11-01T08:31:13.831124Z","last_seen":"2026-06-29T06:55:32.476525Z","times_seen":12,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"vegas123jpku.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.991Z","timestamp":1782716092991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 06:54:53 GMT\r\ndate: Mon, 29 Jun 2026 06:54:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8298,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"876cd04a131bcebb23e3ca9e135f5b2d","sha1":"ab9f5483809466de2f8db6a0026a1091508d63ac","sha256":"7a02050c74ed3a36454d0ece26dccc8fcf154188b3f212398e891cc5b25dde68","sha512":"168c97f7ab8d35b7f3bf125a6041046de689403bc5602bab3bd7f75cfac1706ba4209dbadd66ee811d3668b25808a42132e9cdf7c173a5898727b508eeace838","ssdeep":"192:eqZvio4MVfg8i5xq7eMVDUn5ZKdgWlR66HZ7H:r69aJl","tlshash":"5002e092045b9400eb474cc223cfbf369e8f61566445c5b66ffd18d8acead3a431ab4d","first_seen":"2025-09-12T01:51:25.641676Z","last_seen":"2026-06-29T09:08:44.830971Z","times_seen":2352,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjXrqJVB0Vg7pwkQpWl8VIWac4rtTXA-GVhyaLjWtq071kl2QUMX1soj0yt3w5JAnDadFM3pmS33MvTuJiJ2R2j6afJUaogsSjHAfXm98DwsMfPle-CEkbqqZVOBGBVLJcJJMlElWpZSNrPdgoT_x5dPSYLWtv2hLEwEZHtvd3iUxOit7eC6S_XygH3as/s320/google.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:53.614Z","timestamp":1782716093614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:04 GMT","end":"Mon, 31 Aug 2026 08:38:03 GMT"},"fingerprint":{"sha1":"27:EE:9E:2C:82:53:FB:CB:B0:41:0E:33:79:C9:F7:45:C8:09:70:7F","sha256":"0A:E4:7D:FA:24:16:80:23:E5:2D:25:19:E5:90:D3:B0:5C:BB:B0:D8:62:87:7A:66:E9:6D:26:D8:DC:5A:9F:7C"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjjXrqJVB0Vg7pwkQpWl8VIWac4rtTXA-GVhyaLjWtq071kl2QUMX1soj0yt3w5JAnDadFM3pmS33MvTuJiJ2R2j6afJUaogsSjHAfXm98DwsMfPle-CEkbqqZVOBGBVLJcJJMlElWpZSNrPdgoT_x5dPSYLWtv2hLEwEZHtvd3iUxOit7eC6S_XygH3as/s320/google.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v46\"\r\nexpires: Tue, 30 Jun 2026 06:54:54 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"google.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 29 Jun 2026 06:54:54 GMT\r\nserver: fife\r\ncontent-length: 12407\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12407,"size_decoded":12869,"mime_type":"image/png","magic":"PNG image data, 314 x 320, 8-bit/color RGBA, non-interlaced","md5":"a40eddef23d17dd0ceeedddcc586e2bb","sha1":"b6f7ab3c1f4e8237a90243d4c427c2cb65ef8033","sha256":"a316da52be071d231c22960a5a65efd71a89a91b4a3dc10637ff479b028aae8e","sha512":"4fb67de9f0b3f93e228cfa485b5b5518d8e063620fcc395b4c86c70149710965e0a97dd6703ea1d09c9e39d4dcc76232c2d8407cc6b3b7c81a9a00e7ffdd01e7","ssdeep":"384:A1m1p4i8FauPuC0AmF09i25c/iUlSBjLBS:Gdi0uAG/2+6++BS","tlshash":"2b42d0f76655ffcdb06c9d244cd711a42669923bbae9e58c3001bd33b28de474e68190","first_seen":"2026-04-22T19:05:46.405557Z","last_seen":"2026-06-29T07:01:41.316208Z","times_seen":14,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":363,"receive":4,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/5g-10rb.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"104.18.43.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas123jpku.com/","date":"2026-06-29T06:54:52.601Z","timestamp":1782716092601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 05:04:57 GMT","end":"Wed, 02 Sep 2026 05:04:56 GMT"},"fingerprint":{"sha1":"AB:4E:8C:E9:A7:73:47:36:5D:37:F4:8A:42:DC:EC:F4:00:B4:DD:8A","sha256":"65:95:D9:9B:0B:B5:A1:30:0A:42:E1:37:B6:3C:E0:D7:9F:8A:3D:49:B2:FB:10:15:9E:DE:61:FF:C1:27:C8:5C"}}},"request":{"raw":"GET /banner/5g-10rb.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vegas123jpku.com/\r\nCookie: __cf_bm=Dc9yi0Lh.4AadzF2ahhmtr.lNWg9QKhaSxe_SY60xuI-1782716092.1230397-1.0.1.1-qFQGw6_dnzXYpKsCscv9pRvA4Ov6R5Ye4LBz8aI3gK9ZOz0pgS33n7jtZFljjHw1R5GsteJC2CsXgC1Pl83UBPuK8598kBHQENjUdQHuT1p00IOjcgEUWNbGlbPW6HXK\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:54:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 634536\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Jun 2026 06:21:38 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-polished: webp_bigger\r\nvary: accept-encoding\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=1,i\r\nage: 6150\r\nexpires: Mon, 29 Jun 2026 10:54:52 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a13305bacdc923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634536,"size_decoded":635044,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1900x380, components 3","md5":"25a16788e39e2aa4ddebe6f0804d19cf","sha1":"d021c6af4449f9eff730127f7880ab225d51810a","sha256":"e0cdc877ca94810f41567fd7f1223cfa8098f16b0b142179320583966e8c2d65","sha512":"780952374a7dbe15485dec3c9e1af5e480851ad7863d734e90b328381df31f6bf66e22a271ff30419af078a04c0ac3bcd8d39d074fab08d812f41312dbb7bc4b","ssdeep":"12288:wb1GpKznUCsmmsnMDcDbZpzc7wpGApjiW66FiF1B5rH:+xUC1msnMwDlpw7wbpjn66QFRrH","tlshash":"c7d4238cbfa9509419399336db4b9f54858089bbff815a8b1c3f68ebc933d39512841e","first_seen":"2026-06-23T09:26:13.709616Z","last_seen":"2026-06-29T09:08:44.827306Z","times_seen":64,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}