{"report_id":"dc969dfa-aab2-47c1-8a76-141e428b9532","version":6,"status":"done","tags":[],"date":"2026-05-02T10:41:18Z","url":{"schema":"http","addr":"betoholictrack.ink/OnkfTTui?sub_id=1vl47i613olm58\u0026click_sub=1vl47i613olm58","fqdn":"betoholictrack.ink","domain":"betoholictrack.ink","tld":"ink"},"ip":{"addr":"104.21.53.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"title":"MelBet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"betoholictrack.ink/OnkfTTui?sub_id=1vl47i613olm58\u0026click_sub=1vl47i613olm58","fqdn":"betoholictrack.ink","domain":"betoholictrack.ink","tld":"ink"},"ip":{"addr":"104.21.53.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-06T10:41:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-26T22:25:05.471148Z","alert_count":0,"request_count":4,"received_data":2061061,"sent_data":1767,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-04-26T22:40:43.159605Z","alert_count":0,"request_count":7,"received_data":5788,"sent_data":7301,"comment":"","tags":null,"fingerprints":null},{"fqdn":"betoholictrack.ink","ip":{"addr":"172.67.212.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-17","domain_rank":0,"first_seen":"2025-12-18T09:40:22.833218Z","last_seen":"2026-04-29T20:13:38.547543Z","alert_count":0,"request_count":1,"received_data":3556,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"v3.traincdn.com","ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"domain_registered":"2022-11-10","domain_rank":256434,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2026-04-30T10:05:01.216538Z","alert_count":0,"request_count":26,"received_data":3304419,"sent_data":12784,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"melbet.org","ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"domain_registered":"2015-06-03","domain_rank":170969,"first_seen":"2015-06-06T01:49:09Z","last_seen":"2026-04-26T05:37:53.752099Z","alert_count":0,"request_count":14,"received_data":73866,"sent_data":12270,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-26T22:38:44.781388Z","alert_count":0,"request_count":2,"received_data":979,"sent_data":1600,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-04-26T22:40:44.257175Z","alert_count":0,"request_count":2,"received_data":1140,"sent_data":1300,"comment":"","tags":null,"fingerprints":null},{"fqdn":"refpa65784.com","ip":{"addr":"45.135.120.18","port":443,"asn":56630,"as":"Melbikomas UAB","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-09-24","domain_rank":0,"first_seen":"2026-01-14T22:06:25.34624Z","last_seen":"2026-04-30T19:36:51.083318Z","alert_count":0,"request_count":1,"received_data":3395,"sent_data":632,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/3923254420.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9099000eb24ea1af9e711bad1a633a","sha1":"e0bfd29feb01bd0321c374b5c22d19cc73b63d63","sha256":"e27020856ebfab74669e2a9a380598e11e729976c4f9ca5642bd013b5c7ec01f","sha512":"9cdc07dd56e022ec0ca5bd98abb80fd162ea8a65fcff4292332000d7786dfb4229697c9a5be4e17616c9a7552b358f28fc9cca0e27515b8d81cfd84c9af52dea","ssdeep":"96:Fh21c3lYpJszqtA6+qPtAc2seosydrWZHnxep81z:FhKc3lYCqtA69PtAQeos8rWZHxep81z","tlshash":"79a1c8de5ef8787821090e9a5a8325e105d8ad13a35db473e5190f78033a094fa36af7","size":4688,"data":"","first_seen":"2026-04-29T21:38:33.144808Z","last_seen":"2026-05-02T10:41:25.103493Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/e07ba6c9b6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"89ed1160c4de0df50f8f488963de2fbf","sha1":"a0235ef8ea2c88f8f30ce13279c75cf677c1f153","sha256":"1ac284fa73646ef8aa5e11a47455bc4aef32111f65a9da822237c4ed7ee74c13","sha512":"31f19e1decd5c6a9ca1f22e022097bd360c63b9e99c28192576329122b6caf7f7f4faf4ae3301646d64215abeb1fe121a3e83f70b6498e888ac2b5d8887f1a9b","ssdeep":"","tlshash":"5d21a3be6cb4e03467501aef3c24253293c83993d24b909b6acc439803970285f79fbb","size":1231,"data":"","first_seen":"2026-04-29T21:38:33.141719Z","last_seen":"2026-05-02T10:41:25.083668Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"1cb613c9fac8d4a042ac145bd2b0b908","sha1":"6b65ab0226881b7dfec53dc6a783200d4d8ec4eb","sha256":"e94cc16e157fd971a9c7f9e52504baedc499ffa1e2281887cd014f00b92d899f","sha512":"d9322f50aa5c28baa837fdf9bbc28d008e5d3248ed9bddb9dd6a91fc0d33c19befc144713bcf10657955e1f0f209b10cb204319a322127aa9bbd6ad61d7fba1e","ssdeep":"","tlshash":"9fa0241cf0f3f030073340071135f1c57050c1dddc1003474004c00534d34010144745","size":74,"data":"","first_seen":"2023-03-10T02:25:26Z","last_seen":"2026-05-02T10:41:25.117803Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"1cb613c9fac8d4a042ac145bd2b0b908","sha1":"6b65ab0226881b7dfec53dc6a783200d4d8ec4eb","sha256":"e94cc16e157fd971a9c7f9e52504baedc499ffa1e2281887cd014f00b92d899f","sha512":"d9322f50aa5c28baa837fdf9bbc28d008e5d3248ed9bddb9dd6a91fc0d33c19befc144713bcf10657955e1f0f209b10cb204319a322127aa9bbd6ad61d7fba1e","ssdeep":"","tlshash":"9fa0241cf0f3f030073340071135f1c57050c1dddc1003474004c00534d34010144745","size":74,"data":"","first_seen":"2023-03-10T02:25:26Z","last_seen":"2026-05-02T10:41:25.117803Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"1cb613c9fac8d4a042ac145bd2b0b908","sha1":"6b65ab0226881b7dfec53dc6a783200d4d8ec4eb","sha256":"e94cc16e157fd971a9c7f9e52504baedc499ffa1e2281887cd014f00b92d899f","sha512":"d9322f50aa5c28baa837fdf9bbc28d008e5d3248ed9bddb9dd6a91fc0d33c19befc144713bcf10657955e1f0f209b10cb204319a322127aa9bbd6ad61d7fba1e","ssdeep":"","tlshash":"9fa0241cf0f3f030073340071135f1c57050c1dddc1003474004c00534d34010144745","size":74,"data":"","first_seen":"2023-03-10T02:25:26Z","last_seen":"2026-05-02T10:41:25.117803Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fae1b63ba30a34ec7afcf63dd12ab22","sha1":"5aeac50e64cac88ec5c227783cff0cb45673f7f0","sha256":"4bb82bf2cc2f9ffb8f8b32b50e9bff3e82cd8490ab569bba49588fb1ec168c36","sha512":"a1a16599a16620216bf2a0c051e0e5c2edaa7b2a27fa504f146045df0633e5ff1a26d6963a025f3082867f497cf43496180a602fcc7fe22e5479a1712468869e","ssdeep":"","tlshash":"1621322a1b2c8733455891aed162b3d3d5e261663502846c9479cc13a92bbd36ec98d3","size":1236,"data":"","first_seen":"2026-04-29T21:38:33.14811Z","last_seen":"2026-05-02T10:41:25.118375Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/364b8044ca.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"introduction_type":"importedModule","is_inline":false,"md5":"cb4433385ff2448c898d5ff463fd4c46","sha1":"8e8c9bde1d31dee24f409a650b65f117391187a6","sha256":"7c610410a51611a510b020db5c2a2938012d83448985779794571c2f9c782cff","sha512":"bce2ce1dcbaa8a88e5ce8a31b8376589f28aadc4cd10728e2effb4655609ba2b057f870c47b4edacf7a48fc745eb05271b05924122e274a8f5916bfdbf074a95","ssdeep":"192:Fh7omEDBRuyWtWDJXIOBa0rr0wWW0/5oebxIpKRUG0h65/OAu52MCEFofaIXkhI:H8m+BRuyWtWDJXIOc+5WW25o6x6KWHha","tlshash":"3012c8d52dfc60739ba3439dbc1290b1db0a4a54a14d44dbf6e84f5c059e0cc9ebba63","size":9451,"data":"","first_seen":"2026-04-29T21:38:33.128482Z","last_seen":"2026-05-02T10:41:25.108195Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","size":389,"data":"","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-05-02T11:09:56.563407Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"1cb613c9fac8d4a042ac145bd2b0b908","sha1":"6b65ab0226881b7dfec53dc6a783200d4d8ec4eb","sha256":"e94cc16e157fd971a9c7f9e52504baedc499ffa1e2281887cd014f00b92d899f","sha512":"d9322f50aa5c28baa837fdf9bbc28d008e5d3248ed9bddb9dd6a91fc0d33c19befc144713bcf10657955e1f0f209b10cb204319a322127aa9bbd6ad61d7fba1e","ssdeep":"","tlshash":"9fa0241cf0f3f030073340071135f1c57050c1dddc1003474004c00534d34010144745","size":74,"data":"","first_seen":"2023-03-10T02:25:26Z","last_seen":"2026-05-02T10:41:25.117803Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5P5J869","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f37d4c2831e63376aa12388647cda23d","sha1":"2df95c302b7f4916be0ca3cea9b6409ceb1f7cea","sha256":"b2d8322de0825c9f961843a894bb2887c301848856a2f5cfbdb9a6e1c8211fe9","sha512":"d196c35fec87ac73dc43dbedefe6965ff9f87c4038c2b3763b92a9af1d45a9a202a998523585601fc4375a1c696ba2a5a3ada101e421c075a47b3c431b624a7b","ssdeep":"6144:REg419xK0VZyka/zrbACnCmBHf/gCNPyMHGb6:yxKgTabrGKy16","tlshash":"87d439cdb3857876a396a528c43f158f653e24e3b54ca894f099cce82d305a92173f7e","size":654488,"data":"","first_seen":"2026-05-02T07:11:57.793651Z","last_seen":"2026-05-02T10:41:25.108808Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8SZ536WC7F\u0026cx=c\u0026gtm=4e64u0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1ec256cd0f416f1b8759db8c980df3a","sha1":"401ab28f53e397203ed61af0af3c4cb74df4d84d","sha256":"6c9f6c854ffa1095d45ba2054bf97a8d2fbb5dc29014e9f98fc3914dfb3817ef","sha512":"6df41e4742bafd0803b39de818fb97a833c6146a07496dbb212472b69f33cbab4a0ce4fbf21b2bc690dce6e8c8588531db43434b7b9f5ec901705af74b6de0e1","ssdeep":"6144:Sog413bxKKjZyk8Tr9Aw1CmBHf/VdLXoDeClhf6:zbxKqT8Tr7VXd","tlshash":"daa408ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","size":462412,"data":"","first_seen":"2026-05-02T07:11:57.856275Z","last_seen":"2026-05-02T10:41:25.116765Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"1cb613c9fac8d4a042ac145bd2b0b908","sha1":"6b65ab0226881b7dfec53dc6a783200d4d8ec4eb","sha256":"e94cc16e157fd971a9c7f9e52504baedc499ffa1e2281887cd014f00b92d899f","sha512":"d9322f50aa5c28baa837fdf9bbc28d008e5d3248ed9bddb9dd6a91fc0d33c19befc144713bcf10657955e1f0f209b10cb204319a322127aa9bbd6ad61d7fba1e","ssdeep":"","tlshash":"9fa0241cf0f3f030073340071135f1c57050c1dddc1003474004c00534d34010144745","size":74,"data":"","first_seen":"2023-03-10T02:25:26Z","last_seen":"2026-05-02T10:41:25.117803Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"1cb613c9fac8d4a042ac145bd2b0b908","sha1":"6b65ab0226881b7dfec53dc6a783200d4d8ec4eb","sha256":"e94cc16e157fd971a9c7f9e52504baedc499ffa1e2281887cd014f00b92d899f","sha512":"d9322f50aa5c28baa837fdf9bbc28d008e5d3248ed9bddb9dd6a91fc0d33c19befc144713bcf10657955e1f0f209b10cb204319a322127aa9bbd6ad61d7fba1e","ssdeep":"","tlshash":"9fa0241cf0f3f030073340071135f1c57050c1dddc1003474004c00534d34010144745","size":74,"data":"","first_seen":"2023-03-10T02:25:26Z","last_seen":"2026-05-02T10:41:25.117803Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-435XWQE678","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d08a168d492932dc05168e0ed09b4703","sha1":"abf95d1ca7a414ddc7557dc2758198845d2f25d7","sha256":"7556fc2444260bbd5e042282424ec9b11369cbd6f7fac9d94575f872683eaf89","sha512":"ed279cfed96cae56ced6902f1526c862e8f92bb0bb0d7c812110bac13a61b0c6be5a3bf512517217f9d613665d0d73bdb7467cc2df8dc269ff60ad0f093b6ff7","ssdeep":"6144:kw9QF9EIHcSxkQDPAFB8OOpMcNAcKdE/KhrINVDHQdlhWmN:pQbHcSyQDKB8OSGrZdX","tlshash":"3ea4e8ceb3d670625296f478903f01cba57b28a2b44cc896f189cce42d74a5a5277f7c","size":478911,"data":"","first_seen":"2026-05-02T07:11:57.843835Z","last_seen":"2026-05-02T10:41:25.102292Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"1cb613c9fac8d4a042ac145bd2b0b908","sha1":"6b65ab0226881b7dfec53dc6a783200d4d8ec4eb","sha256":"e94cc16e157fd971a9c7f9e52504baedc499ffa1e2281887cd014f00b92d899f","sha512":"d9322f50aa5c28baa837fdf9bbc28d008e5d3248ed9bddb9dd6a91fc0d33c19befc144713bcf10657955e1f0f209b10cb204319a322127aa9bbd6ad61d7fba1e","ssdeep":"","tlshash":"9fa0241cf0f3f030073340071135f1c57050c1dddc1003474004c00534d34010144745","size":74,"data":"","first_seen":"2023-03-10T02:25:26Z","last_seen":"2026-05-02T10:41:25.117803Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0367b6521012356c6e140b67fe6748e","sha1":"bf88133bfde89c866ea6b978daa79775e5987b04","sha256":"b95016a37316ac2cd2af8539d6693daefa55c443e220613ec02e10f8cc902c71","sha512":"445683a04eeab76ebcd210bc27a4dcb618cc5eb2937cef6f0f31a2dab2bb6a0338a49ed0eae5f90782962fe24b998dc301419eb6a6938255fcb491cad1eb2445","ssdeep":"","tlshash":"00e0ab5a2c1eb4222bf519a9e73b891978d51202368226a9cb87d8643931cca68c6a4c","size":422,"data":"","first_seen":"2023-05-26T17:18:50Z","last_seen":"2026-05-02T10:41:25.119034Z","times_seen":1856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1353cf507a38228e8875872cb13c747","sha1":"9a5b373d59b465db604e37b4fc78f53135e02b75","sha256":"5fcfa7f1b8fdfd7c5e5cb18b27ef5a7d8513acbb0586b076820088da7144df0d","sha512":"a1e32af6631483d382d2399e16e98d78835a63a000d739ec7b5f24c03e28fc3fc419b386e25ab51fc8084b9efc6c3e638e1121760034acb0917a834323aa773c","ssdeep":"","tlshash":"d8f00ea62c82412858680691a3b3ca1430220d49384af9d1c48dcc895d64fe6148f59c","size":479,"data":"","first_seen":"2025-09-15T15:35:03.180699Z","last_seen":"2026-05-02T10:41:25.120056Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"dafb343aac3fe5ca646b209532d36997","sha1":"53e7e61d359e4302e8a8a993ef87941addbdcd3a","sha256":"27054e18281f5b986021cef8efafab9b9fbf6b6dc64a0027cca8bbb3050dc6d4","sha512":"2431a1f17b00f26dd58d329f3c4bcd32aeacc95ece9d1ac6086772ba90aa32700431daabebc5431f41654b2018b3bb9638215e2c0953c16188a17ccc8673c125","ssdeep":"","tlshash":"f6e0cd969519f61b5c33681d896c8b0f95c97e75500d795dc034855c3a53456106723a","size":308,"data":"","first_seen":"2025-12-10T10:19:59.465768Z","last_seen":"2026-05-02T11:09:56.581399Z","times_seen":1396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1df90b63cd87136babac18cd4e1e120e","sha1":"b398a881c9c9a0db7a50f76d0d5150ff7166311e","sha256":"affcaa29f182e808194c1614e2c14979f63dcd48ed6ba906a8fd10f1a31b5789","sha512":"3786bb1e1a07a69b4c1eb0b40605ed1c9d8df8bb967c36c144b466408633e2eaae05c455624ca3f2da831e9dfc36743a540c1cd851c39e9262e70f3db16abe34","ssdeep":"","tlshash":"c46000200000002800a0280022222a002288800000000a000080820a28aa0030800080","size":15,"data":"","first_seen":"2026-03-12T22:10:14.591684Z","last_seen":"2026-05-02T11:09:56.582001Z","times_seen":884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_41be808e0b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"introduction_type":"importedModule","is_inline":false,"md5":"20e7c1f249e36ed84becb1262280f174","sha1":"b2c3fd7d9d506293f5ae0f4641dd3c796ad9ff36","sha256":"06f52bb392ab1f1cf6e23b65ce35726f31dcc4af4a8417c87e31a6641850557b","sha512":"48f9690e3c0a889e4374ea73fc930cfc474611bb040fd19d4fb932ac7202926dc112e54e5a18a77686accae71cd09e973a70329aa1a412fab3a28f76e5e5b8fd","ssdeep":"49152:5Q/A3ErJ5XkG1RoEjBOrXr2O2qkOmdGC/ics:13KGd","tlshash":"d5859ea1f281bc2b1fdb57d7a0630005a2ad1d6dc418f490f5daede939de884916fb2c","size":1742048,"data":"","first_seen":"2026-04-29T13:44:08.463097Z","last_seen":"2026-05-02T11:09:56.582677Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/4f6c0407df.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e42c56f26a43080b0ffd40279ddc10f2","sha1":"6b104e17c7041ab36d260d1aafd0432304137f4f","sha256":"b35199f303ec114e5c741ecd5181e1274acd3be59f1cec465c4b668a2a1e0639","sha512":"9c56b475bb7e2eefa7107fb8f8591ca477b1f0f89d9fb8e7d84cf357e03c64ec3e9f8ca3a7fd8cb894e4885f48dbd75ae7de8465cbd965b9f1b10072cc2ea864","ssdeep":"","tlshash":"a8718349b8bce4fa7f1343893c9060b0a30e5c29911c04a3e4f58b9c569e694472abdb","size":3607,"data":"","first_seen":"2026-04-29T21:38:33.131298Z","last_seen":"2026-05-02T10:41:25.112657Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"1cb613c9fac8d4a042ac145bd2b0b908","sha1":"6b65ab0226881b7dfec53dc6a783200d4d8ec4eb","sha256":"e94cc16e157fd971a9c7f9e52504baedc499ffa1e2281887cd014f00b92d899f","sha512":"d9322f50aa5c28baa837fdf9bbc28d008e5d3248ed9bddb9dd6a91fc0d33c19befc144713bcf10657955e1f0f209b10cb204319a322127aa9bbd6ad61d7fba1e","ssdeep":"","tlshash":"9fa0241cf0f3f030073340071135f1c57050c1dddc1003474004c00534d34010144745","size":74,"data":"","first_seen":"2023-03-10T02:25:26Z","last_seen":"2026-05-02T10:41:25.117803Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"1cb613c9fac8d4a042ac145bd2b0b908","sha1":"6b65ab0226881b7dfec53dc6a783200d4d8ec4eb","sha256":"e94cc16e157fd971a9c7f9e52504baedc499ffa1e2281887cd014f00b92d899f","sha512":"d9322f50aa5c28baa837fdf9bbc28d008e5d3248ed9bddb9dd6a91fc0d33c19befc144713bcf10657955e1f0f209b10cb204319a322127aa9bbd6ad61d7fba1e","ssdeep":"","tlshash":"9fa0241cf0f3f030073340071135f1c57050c1dddc1003474004c00534d34010144745","size":74,"data":"","first_seen":"2023-03-10T02:25:26Z","last_seen":"2026-05-02T10:41:25.117803Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-8SZ536WC7F\u0026cx=c\u0026gtm=4e64u0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dec29ddda4fbe47860e050e11e59b6c","sha1":"35a0f8258f7d639e537c9e4b63b8a7050606a81f","sha256":"a3dc87aad8f2d6538d8a806e56365dde16b34d6e0c2c8444b9948ae588609cae","sha512":"7c077e862e9b0c10262219e78c08a535cedf115c5c0bbbe0ac9eae538d4983c31c590d9f909aeed6032df8723a51d31a09e6aae0404d36d65412fc5cb00ee180","ssdeep":"6144:SHg413bxKKjZyk8Tr9Aw1CmBHf/VdLXoDeClhf6:EbxKqT8Tr7VXd","tlshash":"daa408ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","size":462421,"data":"","first_seen":"2026-05-02T07:11:57.831235Z","last_seen":"2026-05-02T10:41:25.085099Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8a15b46f185909cfab9176e54292758","sha1":"c68090534ced520acf949d631d1ddabc14e091e4","sha256":"c7f469ad4f028fa81963c23101bf61a7d9cf848f60ba7e4817135bcaf5296d1b","sha512":"9e88c3430a3886bb8f7a44ad8fb329352f42ad31714e8aea18fdfe1d1878e3eaa9e961cb1c79da434ea4f266efc94d1fd2f764a5f8053ad9cdd18b8e22c1fdf8","ssdeep":"","tlshash":"a8017b1f81651d7f12015d04cf039618b7cc21aa72db6050d1a80f2a678e7dbad1a9e4","size":702,"data":"","first_seen":"2026-04-02T10:10:00.227393Z","last_seen":"2026-05-02T10:41:25.122956Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"introduction_type":"importedModule","is_inline":false,"md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","size":57,"data":"","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-02T11:09:56.565887Z","times_seen":803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/entry-7791072677.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"26a4460e0e8533fd07c9f5b606795642","sha1":"c7f8d1159a1a30a6cce54d4e187e52a1a077b503","sha256":"277a7035012f62a755f59d025996f547ce2410d50d194758c215e5c528f8d7cc","sha512":"2b8832fb18659d9e8cbb09e3ae88f50c691ef39968d3d9356197b3f3e53a9a590110c083d68354fc65ca616a7de958df68bf7ed228fcf2b683ffb556664ed4f5","ssdeep":"384:H5DBYo8S/FIwTXT4/8LK/Vr4LcIdspqlYRJcPU4PA490zyIyxFYZSqSUUX9OIk:HR76wTXT4/8LoVr4LcIdspgYRGPvPA4Q","tlshash":"8892207c219cf0f5348b449937f6ac9266896d1ff98afc965087c9cc03da04cc9617ba","size":20154,"data":"","first_seen":"2026-04-29T21:38:33.137857Z","last_seen":"2026-05-02T10:41:25.09733Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/e07ba6c9b6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Melbet/e07ba6c9b6.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 11:50:15 GMT\r\netag: W/\"89ed1160c4de0df50f8f488963de2fbf\"\r\nx-amz-meta-mtime: 1777463325.645097273\r\ncontent-encoding: gzip\r\nexpires: Thu, 30 Apr 2026 12:23:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc7\r\nage: 79263\r\ncache: HIT\r\nx-cached-since: 2026-05-01T12:39:54+00:00\r\ntraceparent: 00-4e6a56d81637dcf67c016cb0b5cc4c24-996a6ff031d07c21-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1144)","md5":"89ed1160c4de0df50f8f488963de2fbf","sha1":"a0235ef8ea2c88f8f30ce13279c75cf677c1f153","sha256":"1ac284fa73646ef8aa5e11a47455bc4aef32111f65a9da822237c4ed7ee74c13","sha512":"31f19e1decd5c6a9ca1f22e022097bd360c63b9e99c28192576329122b6caf7f7f4faf4ae3301646d64215abeb1fe121a3e83f70b6498e888ac2b5d8887f1a9b","ssdeep":"","tlshash":"5d21a3be6cb4e03467501aef3c24253293c83993d24b909b6acc439803970285f79fbb","first_seen":"2026-04-29T21:38:33.141719Z","last_seen":"2026-05-02T10:41:25.083668Z","times_seen":18,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/bff-api/config/v2/contacts.json?lang=en\u0026country=137\u0026isVipUser=false","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"GET /bff-api/config/v2/contacts.json?lang=en\u0026country=137\u0026isVipUser=false HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1280; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.094, bff;dur=1.06, wf-uht;dur=0.013\r\nvary: Accept-Encoding\r\nx-cache-expire: 566\r\nx-cache-hit: 1\r\nx-dt: 62\r\nx-pod: R-h2pqr\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4692,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"88b87ab473e1c0e3dd5ef8aa6d83c3cd","sha1":"6f00c7ffe59fe7eb0525fc7b7dfa8c71d2e720f8","sha256":"9f8639404ab3150ab98c648e17f5643bc5e4bad9256d73ec61168d211713b20b","sha512":"754e29b60c2a69f8efaff479b874b27b59edf65a5446e6ab51592b8a1ab646f9ad1a287ea47370dcb58479eb30c92b92467e5996a6fd58550b891dba9f33e45d","ssdeep":"48:Y0r+Qy/3yzjbimpeDrQQyd3yzjpimpem3yzjPmHRimJDebDQyxeNQ7JaiJbHKcJU:03ABr3AX93AY8w0teQu","tlshash":"4ea12b067021cd79e31e025498874c8ab1f505c55efcace2c8becde8a9f1f90936a6d7","first_seen":"2026-04-23T16:10:06.588955Z","last_seen":"2026-05-02T10:41:25.084413Z","times_seen":25,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-8SZ536WC7F\u0026cx=c\u0026gtm=4e64u0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:07.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"GET /gtag/destination?id=G-8SZ536WC7F\u0026cx=c\u0026gtm=4e64u0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\nexpires: Sat, 02 May 2026 10:41:08 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 154319\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462421,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"1dec29ddda4fbe47860e050e11e59b6c","sha1":"35a0f8258f7d639e537c9e4b63b8a7050606a81f","sha256":"a3dc87aad8f2d6538d8a806e56365dde16b34d6e0c2c8444b9948ae588609cae","sha512":"7c077e862e9b0c10262219e78c08a535cedf115c5c0bbbe0ac9eae538d4983c31c590d9f909aeed6032df8723a51d31a09e6aae0404d36d65412fc5cb00ee180","ssdeep":"6144:SHg413bxKKjZyk8Tr9Aw1CmBHf/VdLXoDeClhf6:EbxKqT8Tr7VXd","tlshash":"daa408ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","first_seen":"2026-05-02T07:11:57.831235Z","last_seen":"2026-05-02T10:41:25.085099Z","times_seen":3,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026_p=1777718467531\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AAAAAGQ\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=5\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=scroll\u0026tfd=18220","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:13.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026_p=1777718467531\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AAAAAGQ\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=5\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=scroll\u0026tfd=18220 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://melbet.org\r\ndate: Sat, 02 May 2026 10:41:13 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/8-62/desktop/media_asset/d559dbc327e3a5782c620dd3b923eab3.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/8-62/desktop/media_asset/d559dbc327e3a5782c620dd3b923eab3.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\nlast-modified: Sun, 11 Jan 2026 03:45:38 GMT\r\netag: W/\"9953fede65929e7cbd3a6864d33f122a\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:33:46 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc8\r\nage: 2641\r\ncache: HIT\r\nx-cached-since: 2026-05-02T09:56:56+00:00\r\ntraceparent: 00-7290362141f9229aa3553a12079a7fba-32735e18bf8a402e-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2256,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9953fede65929e7cbd3a6864d33f122a","sha1":"1f2721668ebb5807de997b5593b0e2e9e1574e84","sha256":"d59a4a0d82366b417be15422a86b007ecbad16567587403070dc47c49f4cb9ba","sha512":"b367c1fe0ff392b8eeeb871ddbfc4462381b8a15ffb3174ed1c4977d190240bd0c035a2612b7a47d8730d4cad44c72818b6d736dbd7523cd8cbd89ca7fb8f94f","ssdeep":"","tlshash":"5541288ef6e41d73004a29bcd0f7bb2993d40f5f649a6c38399d6c0e2bd451140aa93d","first_seen":"2026-04-01T08:46:29.730722Z","last_seen":"2026-05-02T10:41:25.086499Z","times_seen":172,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=0\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=466389280.1777718468\u0026dt=MelBet\u0026auid=266276829.1777718468\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64u0h2v894758050za200zd894758050xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938469\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777718468144\u0026tfd=12937","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:08.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:20:28 GMT","end":"Wed, 01 Jul 2026 05:20:27 GMT"},"fingerprint":{"sha1":"B4:91:17:84:3C:D9:FA:84:A4:40:60:C3:B9:3F:CD:5B:78:3A:50:7A","sha256":"8C:FB:DA:65:E4:DD:E6:17:CA:EA:AE:21:0F:37:5C:D0:D8:A3:71:77:C6:1E:C5:E2:4B:59:EB:19:51:C9:A5:8D"}}},"request":{"raw":"POST /ccm/collect?rcb=0\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=466389280.1777718468\u0026dt=MelBet\u0026auid=266276829.1777718468\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64u0h2v894758050za200zd894758050xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938469\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777718468144\u0026tfd=12937 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://melbet.org\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":92,"dns":0,"connect":21,"send":0,"wait":34,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892za20gzb894758050zd894758050\u0026_p=1777718467531\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=3\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=13191","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:08.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892za20gzb894758050zd894758050\u0026_p=1777718467531\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=3\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=13191 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://melbet.org\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-435XWQE678\u0026gtm=45je64t1v9100497636za200zd9100497636\u0026_p=1777718467531\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=13\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115938466~115938468\u0026sid=1777718467\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026tfd=17706","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:12.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-435XWQE678\u0026gtm=45je64t1v9100497636za200zd9100497636\u0026_p=1777718467531\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=13\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115938466~115938468\u0026sid=1777718467\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026tfd=17706 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://melbet.org\r\ndate: Sat, 02 May 2026 10:41:12 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/8-62/desktop/media_asset/06ac49e519497e8b677a550dec0f7b84.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/8-62/desktop/media_asset/06ac49e519497e8b677a550dec0f7b84.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 11 Mar 2026 14:52:37 GMT\r\netag: W/\"cd7a9db3822a8a4ef2532baa42e31104\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:32:43 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.047\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc8\r\nage: 2641\r\ncache: HIT\r\nx-cached-since: 2026-05-02T09:56:56+00:00\r\ntraceparent: 00-ff8eeaa10e0efc240683b68a4c07a92b-6de310ab430ce8b1-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2097,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cd7a9db3822a8a4ef2532baa42e31104","sha1":"c0af4429c0049582ea82c6046ee3806ddfdff481","sha256":"90e9b6cb4ce49841cf85fd387918c84426ae957287fd4b17433a830254325a73","sha512":"326b1bf65540e8a59e59eae5894fb047a03043fe0465f5960d905914f9eb93cc4e1af7faa981a2e291ab68bd999f2fc1a5e92b31fd360620ef1447189a4c49c9","ssdeep":"","tlshash":"b641b698f7f06cf3301b90f8a9b7aa4997c40f1ba8556da4ba9c745c2b1441a0037d3e","first_seen":"2026-04-01T08:46:29.746573Z","last_seen":"2026-05-02T10:41:25.088974Z","times_seen":188,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/8-62/desktop/media_asset/099b86398eaf5dbe64ba055ff7a78175.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/8-62/desktop/media_asset/099b86398eaf5dbe64ba055ff7a78175.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 3169\r\nlast-modified: Wed, 14 Jan 2026 05:03:07 GMT\r\netag: \"1c7453709a49a6418b25cdca3f6d8035\"\r\nexpires: Tue, 21 Apr 2026 10:37:44 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc4\r\nage: 351\r\ncache: HIT\r\nx-cached-since: 2026-05-02T10:35:06+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-87c221af78026949ac2bf44914345f1a-558894bbe009b179-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc4.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"1c7453709a49a6418b25cdca3f6d8035","sha1":"2e63718e60c647dd267bfc3bb2ac1172044aa026","sha256":"a2abb18dc5d42908d53cc233a501805df2a462b2efb2d8b0e32ba7fc92927c62","sha512":"185e7733b80b5d9a2ae3cc04d7fb7277141ee91901f4c2d5b4233c3c138c1fdac9fa116b3df71dfb8e542aed6cbbbc30319048ce9ddcc5975309bd14bd969b04","ssdeep":"","tlshash":"bf514c6453bd3da9d6599b2507e4ced95cfd39fd036d1098cd80062149e97d021e2a4a","first_seen":"2026-01-14T17:17:28.218626Z","last_seen":"2026-05-02T10:41:25.090318Z","times_seen":296,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026_p=1777718467531\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AAAAAGA\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=gtm.init_consent\u0026_fv=1\u0026_ss=1\u0026upn.ref_id=8\u0026tfd=13086","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:08.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026_p=1777718467531\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AAAAAGA\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=gtm.init_consent\u0026_fv=1\u0026_ss=1\u0026upn.ref_id=8\u0026tfd=13086 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://melbet.org\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 72\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1280; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":72,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":1193,\"m\":{\"i1\":137,\"s1\":\"en\"},\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 62\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.258, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"673c051fe562c1aafb5c89ba5e9cdc5c","sha1":"c8e1eb952a7717467a7f3491b6604b56da008198","sha256":"7009e77b0ba48dce807c8abd4407f52908b44cd5f5b32853bc6b28b6c5d4cf94","sha512":"cb4ba67eda371138beeb787dcf51445f77e56ee74761c84aab3cd9a0a54b644ee27092904d7a1a5834ae65bf3872373a44e855af36b59083eb844a6f36eee87c","ssdeep":"","tlshash":"15700000020000288082880032080c880220c800a88000bb00e0000800e88a0000a2a3","first_seen":"2026-05-02T10:41:25.091028Z","last_seen":"2026-05-02T10:41:25.091028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-435XWQE678\u0026cid=682636302.1777718468\u0026gtm=45je64t1v9100497636za200zd9100497636\u0026rcb=13\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938466~115938468\u0026z=367489525","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:07.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:21:55 GMT","end":"Wed, 01 Jul 2026 05:21:54 GMT"},"fingerprint":{"sha1":"72:FC:60:7E:7B:61:3F:60:6D:5D:44:4B:8C:4A:7D:06:38:84:9D:A6","sha256":"9B:56:CB:E2:46:37:E5:19:5F:89:43:5F:F7:61:72:8F:11:C9:8F:E8:B1:92:24:F8:BC:3E:F1:C6:F0:2C:91:DE"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-435XWQE678\u0026cid=682636302.1777718468\u0026gtm=45je64t1v9100497636za200zd9100497636\u0026rcb=13\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938466~115938468\u0026z=367489525 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-02T12:28:39.036266Z","times_seen":842345,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":83,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betoholictrack.ink/OnkfTTui?sub_id=1vl47i613olm58\u0026click_sub=1vl47i613olm58","fqdn":"betoholictrack.ink","domain":"betoholictrack.ink","tld":"ink"},"ip":{"addr":"172.67.212.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T10:40:55.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betoholictrack.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 19:13:11 GMT","end":"Fri, 12 Jun 2026 20:10:57 GMT"},"fingerprint":{"sha1":"0D:AD:78:06:F5:B8:F6:63:C2:8F:A0:10:88:C3:B8:D1:D3:E6:04:44","sha256":"17:69:B7:29:BD:AB:0C:0E:42:F3:CB:D0:02:FC:32:C0:58:8E:AB:7A:ED:D1:9E:B5:EA:42:35:88:F7:B0:90:BD"}}},"request":{"raw":"GET /OnkfTTui?sub_id=1vl47i613olm58\u0026click_sub=1vl47i613olm58 HTTP/1.1\r\nHost: betoholictrack.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 02 May 2026 10:40:55 GMT\r\ncontent-length: 0\r\nlocation: https://refpa65784.com/L?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nserver: cloudflare\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0Qag8wRZQf4Xx4El4%2B18bzLLdKyiCgnjOXNehCLmfV0cV1eyyYoFlDQOanxLcJcozb3jT4VYbCcQ6XMGqjip%2BoPr4Z9Tc4%2FfM7mE0ORyYA3wl2tpi0pdTbW0WVHC6GVu1Q4JA8%3D\"}]}\r\ncf-ray: 9f5669197914b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2829,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":36,"dns":17,"connect":1,"send":0,"wait":65,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/favicon.ico","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-length: 0\r\nlocation: /en/block\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 05 May 2026 10:40:56 GMT; Secure\r\nx-dt: 62\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.004, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2829,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-icons/1.0.1016/62/common.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-icons/1.0.1016/62/common.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 28 Apr 2026 13:25:02 GMT\r\netag: W/\"50ef3c1a0f84f3e14f60f48138003702\"\r\nx-amz-meta-mtime: 1777382685.410756182\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 13:27:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc8\r\nage: 73343\r\ncache: HIT\r\nx-cached-since: 2026-05-01T14:18:34+00:00\r\ntraceparent: 00-b147f878969221c92d3f3345260b1ba0-3edfeadfc0d1408c-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223204,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50ef3c1a0f84f3e14f60f48138003702","sha1":"9a8452fd81460d8ea9d81115dcf15785004d17e1","sha256":"848f4384a2dd92797bbe570df7ef9e1ec870f6e7a822bc00a0302eed87ef1e7c","sha512":"6c6a98b8e2443c76db97a8b1b58e6972e73c8d182b410d0361eda17c5a16c0a1b4e388c766995601c34391287a88e6167bde79b805675bb4ad739c648db8a9b3","ssdeep":"3072:ylP1Ko5fsKYX+JrHqgU80svP+IvHDdNtr8bemjWjVd9qHMLJDxo7fckn:Tcs3O7++1NRVdvKcS","tlshash":"4c2484799658e35c1883e6bddf7fd0a0230f90bab1eac2a42ddec7b4514b4c4e697850","first_seen":"2026-04-27T21:37:56.750591Z","last_seen":"2026-05-02T10:41:25.09301Z","times_seen":27,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\nlast-modified: Wed, 29 Apr 2026 12:24:49 GMT\r\netag: \"ab34908b1d79d387aac283295dac110a\"\r\nx-amz-meta-mtime: 1777465408.760909996\r\nexpires: Wed, 29 Apr 2026 12:26:51 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc8\r\nage: 38\r\ncache: HIT\r\nx-cached-since: 2026-05-02T10:40:18+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-a53a5b02d93556596349f61169782509-8a1af67c8cc4b4fb-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"ab34908b1d79d387aac283295dac110a","sha1":"52b81d3086150ecdc019fc76ca81ad528af6d7ac","sha256":"5eace19047fd9eadc721c4e818de56a07891e0bf14142b3a7bd465b573db990c","sha512":"b6069c395ba0657419f243f2dfe2448cc7184a79525e1426c6d7c6e07e6a12e1ce3741de82cfbf98a5642133754b8b6db4c0dcc90b88a142aee0d402fa1d1afe","ssdeep":"","tlshash":"ab5000000cc000000300c0300c0c0000c00c00f00c0000000c0c000f00c00000000300","first_seen":"2026-03-18T06:25:42.866074Z","last_seen":"2026-05-02T11:09:56.570501Z","times_seen":869,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/bff-api/config/group/get?groups=b.core,d.core\u0026lang=en","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=b.core,d.core\u0026lang=en HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.061, bff;dur=1.87, wf-uht;dur=0.140\r\nvary: Accept-Encoding\r\nx-cache-expire: 566\r\nx-cache-hit: 1\r\nx-dt: 62\r\nx-pod: R-glpqc\r\nx-time-ng: 0.119\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":48717,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1fec645a0728b6e2479819f3ea920170","sha1":"a5c961c8a2320142f06958df3e6f557349ed1ba0","sha256":"4fc64a86525f930c7342c88ba781ab1e7dd518a3ca702b799f9b8813b9d318ad","sha512":"9508ad60561ce647fad96cab5702e116e727f5c6aab9e94ee6189d3be9021ee03695893868f381bffa01db54d22d84a1c3ab3b32e9fb77f13e31159885bd2781","ssdeep":"768:Wq1H/Qxsu/VMgsfxA7FDcJrg5cbzd+0aSFmDvlHyynLkZA:WqF/4/tMgsfxIDcJryyzd+0acmELZA","tlshash":"d123109e79c49a37001f5afecc63fd0e97e40f1b1893a456aae37d8624b291444e743e","first_seen":"2026-05-02T05:38:37.593392Z","last_seen":"2026-05-02T10:41:25.09432Z","times_seen":4,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.077, bff;dur=0.73, wf-uht;dur=0.015\r\nvary: Accept-Encoding\r\nx-cache-expire: 566\r\nx-cache-hit: 1\r\nx-dt: 62\r\nx-pod: R-g8llt\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1638,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3850c896c3e9f053d39c134491322f27","sha1":"cd81cc4397b43df8c8f3bddf4ce54ddfa5a9b0c7","sha256":"c9fd7e9b271ce1a00157442c3eebc1b8ee46b98d802b0c9734811740df2c7f54","sha512":"8cc7e0a2375eb23b9ac68dfb01ce63cbccc642dd3b9f0522922b2e5865861179d0b6e146efc24b4b9081382a72c1ee23c2788e48fcbe04acb05a793b00060557","ssdeep":"","tlshash":"6a31581d50b1893c60690675db826e94affd801f35417a85fe0899acb0e3deef97250b","first_seen":"2026-04-30T19:36:53.285889Z","last_seen":"2026-05-02T10:41:25.094993Z","times_seen":8,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:07.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_f978b4369d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:41:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 389\r\nlast-modified: Thu, 30 Apr 2026 14:40:38 GMT\r\netag: \"3a4af5789426796fafd3970de96371be\"\r\nx-amz-meta-mtime: 1777559898.180810584\r\nexpires: Sat, 02 May 2026 13:41:46 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc8\r\nage: 75561\r\ncache: HIT\r\nx-cached-since: 2026-05-01T13:41:46+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-d2e0092fbc03966cd06cc32f141b0ae0-0666f183e3c4abae-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":389,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (388)","md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-05-02T11:09:56.563407Z","times_seen":1051,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/RobotoVariable/RobotoVariable.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/RobotoVariable/RobotoVariable.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 147664\r\nlast-modified: Mon, 02 Mar 2026 14:14:17 GMT\r\netag: \"41b28e1bd72ac670c2ee83ad0ea538da\"\r\nexpires: Thu, 09 Apr 2026 10:20:13 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc4\r\nage: 2260\r\ncache: HIT\r\nx-cached-since: 2026-05-02T10:03:16+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-c7bbc0d3be54ed28f047bd99edc73812-488f01ae75fd8358-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147664, version 3.983","md5":"41b28e1bd72ac670c2ee83ad0ea538da","sha1":"c1292620ead9a033a7b327322216949db358ada0","sha256":"a54eb5cfffedfd09c478b7d8d991e6b353fd1972706a2b91e7176b79e03c415d","sha512":"868f9f44cf7666b07b637b8b0afe2031530db26a4b0748d5dfacdcef0ea34bffd0da482986c2f91e85a7d0fa3bbf674b874d822b4a87e343ba121a45000f3cc6","ssdeep":"3072:NQFAi+ZiSPWfR5V/J9EbkjFL8BQJdj6mSUYlmLerzCSIfz4EVTS:q1CPWbV/Egx8BqdsJlmSrzmzjVe","tlshash":"1ee313c6a0e2d9c856761ffda1152ea248dd3a28de0f6f66344331345ffaea4107dc26","first_seen":"2026-04-09T09:37:58.836007Z","last_seen":"2026-05-02T11:09:56.572382Z","times_seen":536,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/promotions/first-deposit-yellow?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T10:40:55.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"GET /en/promotions/first-deposit-yellow?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-length: 0\r\nlocation: /en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nset-cookie: platform_type=desktop; Path=/; Expires=Tue, 05 May 2026 10:40:56 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 05 May 2026 10:40:56 GMT; Secure\nauid=W7rOjmn11LhUrgReA9f5Ag==; path=/; secure; httponly; samesite=lax\r\nx-dt: 62\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.007, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2829,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":104,"dns":13,"connect":29,"send":0,"wait":40,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_0fcc3a.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_0fcc3a.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Thu, 30 Apr 2026 14:40:38 GMT\r\netag: W/\"bc81edf98a9e03145e7995a357f97beb\"\r\nx-amz-meta-mtime: 1777559898.176810283\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 May 2026 09:19:11 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc5\r\nage: 4866\r\ncache: HIT\r\nx-cached-since: 2026-05-02T09:19:50+00:00\r\ntraceparent: 00-ee0c3d947055c1deef578b11b5306488-f7ceca81945f79a8-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23439,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13051)","md5":"bc81edf98a9e03145e7995a357f97beb","sha1":"f76d3bbcea31441811616faea48b0a8a2281b78f","sha256":"0fcc3ab8d2686a54418e74aa8a9972b304d9ada6efd821d643a04cdabfc93c01","sha512":"5c2e4999d835fb3663e6886d438b9023cb3e0a4ff32ab908adf381033185cf0757b0546d25b2fa80a7d346a4a893f9d07fd0ade14a28a79ce83aef8f06f20112","ssdeep":"384:jBEY441c8VRTnhnmb8oas+5CxsscvdfAXjCaVYe8+rxdYAktm4r:joas+7","tlshash":"19b2431dece495736e27a521538cbe7c15f4f42bee320e59f81e832016c3baa14e1d69","first_seen":"2026-04-09T10:33:51.203793Z","last_seen":"2026-05-02T11:09:56.579327Z","times_seen":509,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":70,"dns":14,"connect":13,"send":0,"wait":22,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/entry-7791072677.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Melbet/entry-7791072677.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 11:50:15 GMT\r\netag: W/\"a86a0ace7fcdfdc5237751cf8d31726c\"\r\nx-amz-meta-mtime: 1777463325.645097273\r\ncontent-encoding: gzip\r\nexpires: Thu, 30 Apr 2026 11:52:51 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc5\r\nage: 81304\r\ncache: HIT\r\nx-cached-since: 2026-05-01T12:05:52+00:00\r\ntraceparent: 00-49a001236eb4a994850aa0a7a9a29616-82ad45fa48a3e7b7-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20155,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19712)","md5":"26a4460e0e8533fd07c9f5b606795642","sha1":"c7f8d1159a1a30a6cce54d4e187e52a1a077b503","sha256":"277a7035012f62a755f59d025996f547ce2410d50d194758c215e5c528f8d7cc","sha512":"2b8832fb18659d9e8cbb09e3ae88f50c691ef39968d3d9356197b3f3e53a9a590110c083d68354fc65ca616a7de958df68bf7ed228fcf2b683ffb556664ed4f5","ssdeep":"384:H5DBYo8S/FIwTXT4/8LK/Vr4LcIdspqlYRJcPU4PA490zyIyxFYZSqSUUX9OIk:HR76wTXT4/8LoVr4LcIdspgYRGPvPA4Q","tlshash":"8892207c219cf0f5348b449937f6ac9266896d1ff98afc965087c9cc03da04cc9617ba","first_seen":"2026-04-29T21:38:33.137857Z","last_seen":"2026-05-02T10:41:25.09733Z","times_seen":18,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_41be808e0b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_41be808e0b.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Apr 2026 14:40:38 GMT\r\netag: W/\"20e7c1f249e36ed84becb1262280f174\"\r\nx-amz-meta-mtime: 1777559898.175810208\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 May 2026 11:42:45 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc6\r\nage: 82589\r\ncache: HIT\r\nx-cached-since: 2026-05-01T11:44:27+00:00\r\ntraceparent: 00-e63b23675b0e6902aacf4b83d11a5baf-c7e6139a87b2fd28-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1742048,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24159)","md5":"6fd8c23bf88977aff6c579803e27612f","sha1":"317daf28c74e8805ce79348b17335d2d58d158c6","sha256":"4952681ddab67e5b9267626d5713b8620bc35ecfd01c3d6a6cadd1dd06fa32b8","sha512":"7cb553421d3789289cc83f457117c75e9fbd1884feeaaa165b26050fdcfb5649d85f5b49b22c6fbb3780fd0dbfe6b2096a8283d0cb5cb9fd670d58d96d8008a4","ssdeep":"24576:5Q/A3yfrJ5dFkG1RoEjBOrXr2O2qkOmdOFVs:5Q/A3ErJ5XkG1RoEjBOrXr2O2qkOmdGs","tlshash":"48258e65f281bd2f2adb6bd750230046a2ed1d6dc428f490f5c7dde93ace850916eb2c","first_seen":"2026-04-29T13:44:08.447801Z","last_seen":"2026-05-02T11:09:56.552771Z","times_seen":72,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/bff-api/config/group/get?groups=d.customize\u0026lang=en","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.customize\u0026lang=en HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==; lng=en; cookies_agree_type=3; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 924\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.054, bff;dur=1.03, wf-uht;dur=0.011\r\nx-cache-expire: 566\r\nx-cache-hit: 1\r\nx-dt: 62\r\nx-pod: R-jf5zf\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":924,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"040624299f725e8cc4cc8ec3a97a1bbc","sha1":"8fbae0a269880384e1e095e42d110e1a151dfce0","sha256":"704d84acfb93940aa44f129d76cd4cc2fd642b602338c4a6f3ff0ae73f545857","sha512":"46f3168e2b4d644729570bfd62989c2a503f57268703f99bc14853ba46880b4ca685bf837c3ef3f4bcb1a3081ae0fc3bbe0ac9fc1d2b2d61d0c16f82273097b6","ssdeep":"","tlshash":"8011f94dd1a0663c99a087d5d9823f149ff5d097384d3901ec188dda33d39e6d1b1307","first_seen":"2026-04-24T23:07:37.767431Z","last_seen":"2026-05-02T10:41:25.098575Z","times_seen":25,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nX-Fc: bf5383e14dd845a2502d668a43c9fa310c8ebd46e38c7a767b68fb7db0ff7e28\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 62\r\nx-time-ng: 0.000\r\nx-uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.130, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/8-62/desktop/media_asset/8619b7da41c46c6586b12fdf164c41bc.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/8-62/desktop/media_asset/8619b7da41c46c6586b12fdf164c41bc.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 08 Apr 2026 06:43:37 GMT\r\netag: W/\"8ea506d2ff6accd987650787b0a920ca\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 08 Apr 2026 08:32:01 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc8\r\nage: 2641\r\ncache: HIT\r\nx-cached-since: 2026-05-02T09:56:56+00:00\r\ntraceparent: 00-eff8ce76b78ed81333a83c2256c81af0-822554be574bbf0d-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5279,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8ea506d2ff6accd987650787b0a920ca","sha1":"7c52f86c03fbd43d35f43ac1f3a090a11ee6125e","sha256":"c7279e7ae197044aee573511219a942b7334b91c3a5b65f8c8676f5f8dd107f1","sha512":"44681fd1343bf752dafd8f4ee1666bab0dc63052b89c0a951b0f2e341e23cc0e7752a65cdfd163b12258c00fa1bea5a4a27d5d42b845b462d89be0d13c263969","ssdeep":"48:TzABItkAJf081mgAJo8ABAHAB0EABzzuFABIIv4ABBxS/sABYEwABOt73ABBidAs:9f0H9t4ljvL33lx/d4q3rFTnU2g","tlshash":"deb12a88fff09863001f94b8e9f7ba4ae7c40f1ba85699287fdd34092b54505446adbe","first_seen":"2026-04-08T17:31:19.769581Z","last_seen":"2026-05-02T10:41:25.099152Z","times_seen":136,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/86509141a3.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Melbet/86509141a3.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 506\r\nlast-modified: Wed, 29 Apr 2026 11:50:16 GMT\r\netag: \"75157874f1812b1a85d5d7c78bb43035\"\r\nx-amz-meta-mtime: 1777463325.6430971\r\nexpires: Thu, 30 Apr 2026 18:07:37 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc8\r\nage: 58247\r\ncache: HIT\r\nx-cached-since: 2026-05-01T18:30:10+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-96a1f11ae2fc7cc1930c03064f507cb3-9bf5fb8d62ed6e2f-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":506,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (506), with no line terminators","md5":"75157874f1812b1a85d5d7c78bb43035","sha1":"bfe6f02506e791a7ac46a7bddf6ee3ccb340be15","sha256":"1f4762c043d75946f9d3066ba8dff14622516b24145b3ef6b4049d30ceb629f2","sha512":"565d1e650c9a0147a050a73f0db118e839912e67f431ca7c549930e4b6aa84ff249bd07ad97d783a7080e27065bdee079465875ba816cf922f15e94c1a99414b","ssdeep":"","tlshash":"70f0e92a3eadf2d8147b82801e904bca4057f20ac10a68dcb823d2549d4b6179fa446e","first_seen":"2026-04-09T18:37:42.867807Z","last_seen":"2026-05-02T10:41:25.099805Z","times_seen":144,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2829\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.090, dt_total;dur=0.006, total;dur=4;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 05 May 2026 10:40:56 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 62, 62\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2829,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1299)","md5":"5a2fb9f2b4c1583ad34a52b9b6e1737f","sha1":"489ca2b8a46b157c725dffc7de375b93cc499581","sha256":"1cd0d96a461fec071a799e339cfa9ae97fc51b7e0b3da86b2f02d79d3a78e8a7","sha512":"b7356bb2c47cb538744bfb2be6e4bc2ec06c23d3b75e6d527188d531fd0da127ec12db4df6baa8e348410083863b2490beb264d8dbcb951c091b1667fdb1dc17","ssdeep":"","tlshash":"5051b72b5a28ce3f05106458d623e39ae5cc71bb714b9498c0b84d1a2b4f7d3ad8f8e5","first_seen":"2026-04-29T21:38:33.085559Z","last_seen":"2026-05-02T10:41:25.100415Z","times_seen":9,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 19\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"{\"w\":55,\"state\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 62\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.062, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-02T12:25:45.113818Z","times_seen":256451,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-icons/1.0.1016/62/country.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-icons/1.0.1016/62/country.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 28 Apr 2026 13:25:02 GMT\r\netag: W/\"e755054847ccc09de8ac9bdf2c4326d6\"\r\nx-amz-meta-mtime: 1777382685.410756182\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 13:27:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc6\r\nage: 73342\r\ncache: HIT\r\nx-cached-since: 2026-05-01T14:18:35+00:00\r\ntraceparent: 00-51dc8d4b5b626f99f285bb9a8bf701bc-88db7c71cb67e54b-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e755054847ccc09de8ac9bdf2c4326d6","sha1":"1461e05caf5c7bfda69a9a45127a8f78dc37a9ec","sha256":"d03bc4c7e0d2d128ba647df7ef393f9e856ff0b98b09d6d2849bdaaaded8e7b9","sha512":"2a6e1617fe4b5f4039431564fdb2d90f8a4a930ea555e10133b9d07809ebe56f64cfc9000de709289b2cb9143664bb8e334cabf2d49c7c20dac9ba8ed0eee9ce","ssdeep":"3072:hgvO+igz5Wy8EjUskAnA3ZJ9QeVCLpE74OWuhgwlKqjk71xhbXVjGYLGS/suV1SM:uqCLpPOWuq5vaSueoO7","tlshash":"08245554b099b14c2a8363e8c7afa5e1133e61db71da419938e993d8520e3dffe83950","first_seen":"2025-08-28T01:30:48.467208Z","last_seen":"2026-05-02T11:09:56.551467Z","times_seen":1726,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-435XWQE678","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:07.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"GET /gtag/js?id=G-435XWQE678 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 02 May 2026 10:41:07 GMT\r\nexpires: Sat, 02 May 2026 10:41:07 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 158231\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478911,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d08a168d492932dc05168e0ed09b4703","sha1":"abf95d1ca7a414ddc7557dc2758198845d2f25d7","sha256":"7556fc2444260bbd5e042282424ec9b11369cbd6f7fac9d94575f872683eaf89","sha512":"ed279cfed96cae56ced6902f1526c862e8f92bb0bb0d7c812110bac13a61b0c6be5a3bf512517217f9d613665d0d73bdb7467cc2df8dc269ff60ad0f093b6ff7","ssdeep":"6144:kw9QF9EIHcSxkQDPAFB8OOpMcNAcKdE/KhrINVDHQdlhWmN:pQbHcSyQDKB8OSGrZdX","tlshash":"3ea4e8ceb3d670625296f478903f01cba57b28a2b44cc896f189cce42d74a5a5277f7c","first_seen":"2026-05-02T07:11:57.843835Z","last_seen":"2026-05-02T10:41:25.102292Z","times_seen":2,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":90,"dns":1,"connect":7,"send":0,"wait":32,"receive":36,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026_p=1777718467531\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AAAAAGQ\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026_s=2\u0026tfd=13186","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:08.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026_p=1777718467531\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AAAAAGQ\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026_s=2\u0026tfd=13186 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 110\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"en=gtm.init\u0026seg=0\r\nen=gtm.js\u0026seg=0\r\nen=gtm.dom\r\nen=gtm.load\r\nen=gtm.scrollDepth\r\nen=scroll\r\nen=gtm.scrollDepth"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://melbet.org\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/3923254420.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Melbet/3923254420.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 11:50:15 GMT\r\netag: W/\"6a9099000eb24ea1af9e711bad1a633a\"\r\nx-amz-meta-mtime: 1777463325.629095889\r\ncontent-encoding: gzip\r\nexpires: Thu, 30 Apr 2026 12:06:30 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc4\r\nage: 80619\r\ncache: HIT\r\nx-cached-since: 2026-05-01T12:17:17+00:00\r\ntraceparent: 00-568dd6515102c70ac921dd509699ba00-f2f0e416a520f963-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4688,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4092)","md5":"6a9099000eb24ea1af9e711bad1a633a","sha1":"e0bfd29feb01bd0321c374b5c22d19cc73b63d63","sha256":"e27020856ebfab74669e2a9a380598e11e729976c4f9ca5642bd013b5c7ec01f","sha512":"9cdc07dd56e022ec0ca5bd98abb80fd162ea8a65fcff4292332000d7786dfb4229697c9a5be4e17616c9a7552b358f28fc9cca0e27515b8d81cfd84c9af52dea","ssdeep":"96:Fh21c3lYpJszqtA6+qPtAc2seosydrWZHnxep81z:FhKc3lYCqtA69PtAQeos8rWZHxep81z","tlshash":"79a1c8de5ef8787821090e9a5a8325e105d8ad13a35db473e5190f78033a094fa36af7","first_seen":"2026-04-29T21:38:33.144808Z","last_seen":"2026-05-02T10:41:25.103493Z","times_seen":18,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/8-62/desktop/media_asset/daf6bdf58cdba897de1826e89377b87e.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/8-62/desktop/media_asset/daf6bdf58cdba897de1826e89377b87e.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 02 Mar 2026 10:48:37 GMT\r\netag: W/\"9b53b6a56422aeff2b17c1e959e70f23\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:33:33 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc5\r\nage: 2642\r\ncache: HIT\r\nx-cached-since: 2026-05-02T09:56:55+00:00\r\ntraceparent: 00-428a28e2777b9aac80102b21977f121e-af52682a469d96d2-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11135,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b53b6a56422aeff2b17c1e959e70f23","sha1":"a243187fa5142270211f9be45134a13ccd0c0af4","sha256":"be485a8c95a062e63cf86d21fffd600c9fddf7b34485f67efc623d3ac4d16215","sha512":"9bc45fbcbda3f2ddce100d69aca4b37ad93ba8fc6a633b69ef598f81a84387ef5a569d9d69a28c5d0ada3c716917b68e41aa345de9ddb0d719d744e5913e3202","ssdeep":"96:7mTuqDIz3aZ+M7Zcjm8sgx85m76n69qaSKOwqstJJBMTCSMRyfiNWIz0ubdx:fDukXEUyfiNWIzrj","tlshash":"1732d6d8baf96c33021670fce5fbb91be3d81f978d4da8647a9c3c081f5011014aaa79","first_seen":"2026-04-01T08:46:29.780783Z","last_seen":"2026-05-02T10:41:25.104077Z","times_seen":172,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 98\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":98,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":11054,\"m\":{\"s1\":\"8b68c702-3108-4f83-845a-79444f6ee570\"},\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 62\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.086, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"771cacbb3332c882aceb4404b9ef875e","sha1":"ac477a48fc9c44fd5ebef7e98642ff4747b69e17","sha256":"a5f1c13741c6e153cfb6fbcab53f9ceeb9b758d44049bb6e9e0b1e6202e127b1","sha512":"efdf69e851238d8b3a3324139b8ea619c419519b4e2f7bd4ed2e2561139f3de26f96c9f5a6588cfaefd840e2c7d8e13d79354732c4868d0d56ed9731ccf042dc","ssdeep":"","tlshash":"fc7000000200000800808c000308c8c802208800308020b300e0802002c88e0002e2a3","first_seen":"2026-05-02T10:41:25.105487Z","last_seen":"2026-05-02T10:41:25.105487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/4aafa3c312.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Melbet/4aafa3c312.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 11:50:16 GMT\r\netag: W/\"53077468a10951cf995f7719a555f1be\"\r\nx-amz-meta-mtime: 1777463325.631096062\r\ncontent-encoding: gzip\r\nexpires: Thu, 30 Apr 2026 15:20:45 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc7\r\nage: 69305\r\ncache: HIT\r\nx-cached-since: 2026-05-01T15:25:52+00:00\r\ntraceparent: 00-bcd0fec7a61bfa0fbf242606e7a1cb94-d3fff9d73a5ddeee-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3994,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3994), with no line terminators","md5":"53077468a10951cf995f7719a555f1be","sha1":"8c4467476b31f0ab221aaa37df579ee68339afbd","sha256":"381b21eac86b13e291fb8aeb15803e5cabb1340a6dd9e385addaaff85432b64c","sha512":"2d044da0d6ea8871ea8a6682d5593f30d9295a10919a2ddbc3d7418adc37ea1b2439d0f9796a4ce5e194c0b5fa00cadfe5c1534e0afb002f70e2d67d620dd816","ssdeep":"","tlshash":"8481a9bebcb898320537e021a6596e7d0a71f51bd6200f85e00d93681cc36d36df2da8","first_seen":"2026-04-22T00:53:54.245766Z","last_seen":"2026-05-02T11:09:56.566891Z","times_seen":217,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/32e891be2047d2b3a7c8d0a02ca3f36d.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/colors/32e891be2047d2b3a7c8d0a02ca3f36d.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Apr 2026 12:48:03 GMT\r\netag: W/\"32e891be2047d2b3a7c8d0a02ca3f36d\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 29 Apr 2026 14:46:16 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc8\r\nage: 820\r\ncache: HIT\r\nx-cached-since: 2026-05-02T10:27:17+00:00\r\ntraceparent: 00-6ddf7e9593391ff2adc6889cd229d8c5-c37cd9b1a277b83d-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc4.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40199,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40199), with no line terminators","md5":"32e891be2047d2b3a7c8d0a02ca3f36d","sha1":"025c5f2b990133f52acbacd0cb184e6f8a5adecd","sha256":"dc345d41709db8ceab11a629c144d557fe62139c04cec9b421bb8b673e251a3a","sha512":"ecffac71acb1031eda8a35490ff4519949030dc3f680fc966278482c3f23efe4c6cac36e8d66b045a681fe9aa76034173a485d9d38462ff0c493530ed4decf1c","ssdeep":"768:jEErScJ0xRpaKkXrwNVWS8EHwCZZA7cDTBfCmWkfswvEWwZkkXI/akT91GnjBbNY:JXID5","tlshash":"67033c3fe995d9712a6a1d32852c652a3e3be5ce79240f8bd03c23a470c5b031ba5f75","first_seen":"2026-04-29T21:38:33.12358Z","last_seen":"2026-05-02T10:41:25.107254Z","times_seen":18,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/364b8044ca.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Melbet/364b8044ca.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 11:50:15 GMT\r\netag: W/\"cb4433385ff2448c898d5ff463fd4c46\"\r\nx-amz-meta-mtime: 1777463325.630095976\r\ncontent-encoding: gzip\r\nexpires: Thu, 30 Apr 2026 12:23:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc4\r\nage: 79263\r\ncache: HIT\r\nx-cached-since: 2026-05-01T12:39:54+00:00\r\ntraceparent: 00-3131962182838ea4012215e763cdfe65-0d9890eaa7d07464-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9451,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9214)","md5":"cb4433385ff2448c898d5ff463fd4c46","sha1":"8e8c9bde1d31dee24f409a650b65f117391187a6","sha256":"7c610410a51611a510b020db5c2a2938012d83448985779794571c2f9c782cff","sha512":"bce2ce1dcbaa8a88e5ce8a31b8376589f28aadc4cd10728e2effb4655609ba2b057f870c47b4edacf7a48fc745eb05271b05924122e274a8f5916bfdbf074a95","ssdeep":"192:Fh7omEDBRuyWtWDJXIOBa0rr0wWW0/5oebxIpKRUG0h65/OAu52MCEFofaIXkhI:H8m+BRuyWtWDJXIOc+5WW25o6x6KWHha","tlshash":"3012c8d52dfc60739ba3439dbc1290b1db0a4a54a14d44dbf6e84f5c059e0cc9ebba63","first_seen":"2026-04-29T21:38:33.128482Z","last_seen":"2026-05-02T10:41:25.108195Z","times_seen":18,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026_p=1777718467531\u0026em=tv.1~em.noilk22xNpgFAiQP0E-qf9M4EzQerNj9ocTLNZSCaeE\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AAAAAGQ\u0026cid=682636302.1777718468\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=4\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=page_view\u0026tfd=13191","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:08.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8SZ536WC7F\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026_p=1777718467531\u0026em=tv.1~em.noilk22xNpgFAiQP0E-qf9M4EzQerNj9ocTLNZSCaeE\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1507649955\u0026_eu=AAAAAGQ\u0026cid=682636302.1777718468\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=4\u0026tag_exp=0~115938466~115938468\u0026sid=1777718468\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=page_view\u0026tfd=13191 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://melbet.org\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=0\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=466389280.1777718468\u0026dt=MelBet\u0026auid=266276829.1777718468\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64u0h2v894758050za200zd894758050xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938469\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777718468144\u0026tfd=12937","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:08.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /ccm/collect?rcb=0\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=466389280.1777718468\u0026dt=MelBet\u0026auid=266276829.1777718468\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64u0h2v894758050za200zd894758050xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938469\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777718468144\u0026tfd=12937 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5P5J869","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:07.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"GET /gtm.js?id=GTM-5P5J869 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sat, 02 May 2026 10:41:07 GMT\r\nexpires: Sat, 02 May 2026 10:41:07 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 02 May 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 185115\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654488,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54460)","md5":"f37d4c2831e63376aa12388647cda23d","sha1":"2df95c302b7f4916be0ca3cea9b6409ceb1f7cea","sha256":"b2d8322de0825c9f961843a894bb2887c301848856a2f5cfbdb9a6e1c8211fe9","sha512":"d196c35fec87ac73dc43dbedefe6965ff9f87c4038c2b3763b92a9af1d45a9a202a998523585601fc4375a1c696ba2a5a3ada101e421c075a47b3c431b624a7b","ssdeep":"6144:REg419xK0VZyka/zrbACnCmBHf/gCNPyMHGb6:yxKgTabrGKy16","tlshash":"87d439cdb3857876a396a528c43f158f653e24e3b54ca894f099cce82d305a92173f7e","first_seen":"2026-05-02T07:11:57.793651Z","last_seen":"2026-05-02T10:41:25.108808Z","times_seen":3,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":86,"dns":3,"connect":7,"send":0,"wait":21,"receive":27,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-435XWQE678\u0026gtm=45je64t1v9100497636za200zd9100497636\u0026_p=1777718467531\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=13\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938466~115938468\u0026sid=1777718467\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026upn.ref_id=8\u0026tfd=12687","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:07.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-435XWQE678\u0026gtm=45je64t1v9100497636za200zd9100497636\u0026_p=1777718467531\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=682636302.1777718468\u0026frm=0\u0026pscdl=noapi\u0026rcb=13\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938466~115938468\u0026sid=1777718467\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmelbet.org%2Fen%2Fblock%3Ftag%3Dd_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58%26pb%3D84c5aa76beaa427d8eb360c03fb0f2da%26click_id%3D1vl47i613olm58%26r%3Dpromotions%2Ffirst-deposit-yellow\u0026dt=MelBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026upn.ref_id=8\u0026tfd=12687 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://melbet.org\r\ndate: Sat, 02 May 2026 10:41:07 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":57,"dns":0,"connect":21,"send":0,"wait":30,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/non-embedded.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Melbet/non-embedded.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 11:50:16 GMT\r\netag: W/\"03bfd404aedaaa744bda3e5b186a43db\"\r\nx-amz-meta-mtime: 1777463325.653097965\r\ncontent-encoding: gzip\r\nexpires: Fri, 01 May 2026 10:11:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc6\r\nage: 352\r\ncache: HIT\r\nx-cached-since: 2026-05-02T10:35:04+00:00\r\ntraceparent: 00-bae12630c015787b3103ff3d3ceddeed-77802618bdad76f0-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc4.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35002,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (35001)","md5":"03bfd404aedaaa744bda3e5b186a43db","sha1":"ecb39c6fe35e96b364e60dbb252d7dc10b80784b","sha256":"5b16f2191f8ec6ada107664d08dcf2971b0ce55de16813dca484f18576b10bb7","sha512":"d3eee8e1eb1f1275b8e83f7b9d383129bb2af12181e4894792312dc186b12477925af2e53539f170ec2a0ea1b98473aa39d45c2953cd414567eda3fffb858bb6","ssdeep":"384:Nm2Ixar8n5rz0f0uL/FrLrw+++Tj1jRpO54FZsa6XvKc:Q2xqgHc+++rpOOAic","tlshash":"28f27316da401667f9278a2a29d8fb0c75e8e107ed730e2df019d1188fd7f9f1aa0794","first_seen":"2026-04-09T20:38:49.80371Z","last_seen":"2026-05-02T11:09:56.559854Z","times_seen":504,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":72,"dns":11,"connect":29,"send":0,"wait":27,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:56.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Melbet/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 57\r\nlast-modified: Wed, 29 Apr 2026 11:50:16 GMT\r\netag: \"0f52fc8c693ecafc1d77320a696ce65b\"\r\nx-amz-meta-mtime: 1777463325.608094074\r\nexpires: Fri, 01 May 2026 00:37:53 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc7\r\nage: 36056\r\ncache: HIT\r\nx-cached-since: 2026-05-02T00:40:00+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-0df7130513dc31adb61e2c7fd6ea88c0-94bfe9e418c06099-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-02T11:09:56.565887Z","times_seen":803,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/4.0.21/Desktop/Default/client.l.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-ui/4.0.21/Desktop/Default/client.l.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Tue, 21 Apr 2026 14:09:53 GMT\r\netag: W/\"a0852ac69a5b95d5d2e07ca02d5c3762\"\r\nx-amz-meta-mtime: 1776780590.80875167\r\ncontent-encoding: gzip\r\nexpires: Thu, 30 Apr 2026 11:42:42 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc6\r\nage: 82608\r\ncache: HIT\r\nx-cached-since: 2026-05-01T11:44:09+00:00\r\ntraceparent: 00-0b6912481449f250b38d34f7f5935c06-cd389a698099d91e-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc4.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":628960,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (32215)","md5":"a0852ac69a5b95d5d2e07ca02d5c3762","sha1":"3034811a2d05456418668b5af8c0758181a9c3ad","sha256":"8f441bdb2ed03ba8a798f9176f00c3f0b6724bd7b4d73f8449d0dc8b8eed20a3","sha512":"21d2004c989398dcf980988937cc0558038a865cf5c5c29a3324e1d4b4e59b0b153a777ccac48bbc19e08633c6644be6955373b289aaaf71925db74ffe939bee","ssdeep":"12288:50Qug6ZZB+DgRqplNY5OmaycMQk1t/APW4AedS3:ilB+q94AedS3","tlshash":"3ed4841cf19dd6393e37e52142989efc2630b357db221d6ff45d02890ac366361a2ea7","first_seen":"2026-04-29T13:44:08.427495Z","last_seen":"2026-05-02T11:09:56.568134Z","times_seen":71,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 54\r\nlast-modified: Thu, 26 Mar 2026 13:23:36 GMT\r\netag: \"06c9b68c4f5819c83cc220a9024bbee1\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 26 Mar 2026 15:16:20 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc6\r\nage: 1437\r\ncache: HIT\r\nx-cached-since: 2026-05-02T10:17:00+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-7b9fa385a0566d6ce761ffca56d9bcc2-d3cbf43e86899883-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc4.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"06c9b68c4f5819c83cc220a9024bbee1","sha1":"72061d9a7ff428838a3ffbeea37f5b239685d24d","sha256":"b78dcd52b6ad0b04c4e35350f6bfc45cdf407c55b71f49ac5e201bb403213450","sha512":"f75445453afaa7b628853122e9ca4dd668545de13331ee0d3b10d1f59429293f7a324464bfbae5eb4bc31a25968d4c0142fad5f42dd0d1053e27f5762e72629a","ssdeep":"","tlshash":"76900299a50822502669c666519d48d12184125b4511369ce5527911f446c819950689","first_seen":"2026-03-26T08:31:53.670846Z","last_seen":"2026-05-02T11:09:56.571841Z","times_seen":841,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Melbet/4f6c0407df.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Melbet/4f6c0407df.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 11:50:15 GMT\r\netag: W/\"e42c56f26a43080b0ffd40279ddc10f2\"\r\nx-amz-meta-mtime: 1777463325.633096235\r\ncontent-encoding: gzip\r\nexpires: Thu, 30 Apr 2026 12:23:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc4\r\nage: 79263\r\ncache: HIT\r\nx-cached-since: 2026-05-01T12:39:54+00:00\r\ntraceparent: 00-a7117ecff1f54fa9b519705d6707743d-95b06aed7b06ed52-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3607,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3520)","md5":"e42c56f26a43080b0ffd40279ddc10f2","sha1":"6b104e17c7041ab36d260d1aafd0432304137f4f","sha256":"b35199f303ec114e5c741ecd5181e1274acd3be59f1cec465c4b668a2a1e0639","sha512":"9c56b475bb7e2eefa7107fb8f8591ca477b1f0f89d9fb8e7d84cf357e03c64ec3e9f8ca3a7fd8cb894e4885f48dbd75ae7de8465cbd965b9f1b10072cc2ea864","ssdeep":"","tlshash":"a8718349b8bce4fa7f1343893c9060b0a30e5c29911c04a3e4f58b9c569e694472abdb","first_seen":"2026-04-29T21:38:33.131298Z","last_seen":"2026-05-02T10:41:25.112657Z","times_seen":18,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refpa65784.com/L?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"refpa65784.com","domain":"refpa65784.com","tld":"com"},"ip":{"addr":"45.135.120.18","port":443,"asn":56630,"as":"Melbikomas UAB","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T10:40:55.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refpa65784.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 05:24:51 GMT","end":"Sun, 24 May 2026 05:24:50 GMT"},"fingerprint":{"sha1":"F6:19:B9:20:EA:C0:5C:3F:57:CB:99:37:15:0B:A4:FC:42:C9:46:5F","sha256":"0B:EA:9F:DE:3C:5B:4F:AE:DC:C2:EE:B3:99:8A:81:17:78:8C:A0:5A:C2:16:8B:30:70:4A:76:7B:FF:D6:DC:25"}}},"request":{"raw":"GET /L?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow HTTP/1.1\r\nHost: refpa65784.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:55 GMT\r\nlocation: https://melbet.org:443/en/promotions/first-deposit-yellow?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nset-cookie: A_59735_v=0; expires=Sun, 03 May 2026 10:40:55 GMT; path=/; secure\nA_59735_c=1; expires=Sun, 03 May 2026 10:40:55 GMT; path=/; secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.429\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":2829,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T12:30:46.217734Z","times_seen":14525433,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":131,"dns":62,"connect":21,"send":0,"wait":451,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/analytics-module-api/v1/analytics?projectId=62\u0026domain=melbet.org","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"GET /analytics-module-api/v1/analytics?projectId=62\u0026domain=melbet.org HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==; lng=en; cookies_agree_type=3; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 155\r\nx-request-id: a34e1aacc582c01aa5a74cf91c8afc37\r\nx-request-guid: a34e1aacc582c01aa5a74cf91c8afc37\r\nx-server-name: Analytics\r\ncache-control: public, max-age=300, stale-while-revalidate=60\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=0, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":155,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4a4e5816d26d3efbe44d9aa6f9ee6f1c","sha1":"415efe1f5d249c3696be79f743ea730874b6dec0","sha256":"17923aa9f44a5ab8e42b3e5f6fb53b32166c157558bcd93bdee82056fe6bedbb","sha512":"95ab73814ba4d599eb645db9361dbff5841faa8fad9bea48837b154c5798a66b1a0572a273584e2a7f46488276e28eb28ca061fb15455cdd315fdd9d0aa1ac08","ssdeep":"","tlshash":"dac08c129081a6ac9883d1d0a0caae3a638920335da708c109258334c2be878a000f1f","first_seen":"2026-04-01T08:46:29.7219Z","last_seen":"2026-05-02T10:41:25.113195Z","times_seen":111,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 48\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":10273,\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 62\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.096, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"32b6a1b7f89aae01ca5a8c31b9e05928","sha1":"218f845454f1321d6b96cfe834b548558ceeec3a","sha256":"9df2f3851510c0db8cb7e74705475a97266ad997e5d2d358cf5410bcf060a284","sha512":"c910b234cf857c04edd12ae1e8c39395270912793e246abe09973779171b21080aec49ac5aacb4ee80ffb1b5bc3026b013e8428f5185359fc5d95c15a73268af","ssdeep":"","tlshash":"3f7000800200800c0080c8000a8808880220c800b08202b388e000a000ca8a0002e2a3","first_seen":"2026-05-02T10:41:25.114587Z","last_seen":"2026-05-02T10:41:25.114587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_092441fd9e119a0aa627b127d0943689.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_092441fd9e119a0aa627b127d0943689.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Thu, 09 Apr 2026 14:08:33 GMT\r\netag: W/\"3e8249ef245b150101de2ecd74adf142\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Apr 2026 03:25:00 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc5\r\nage: 2009\r\ncache: HIT\r\nx-cached-since: 2026-05-02T10:07:28+00:00\r\ntraceparent: 00-b3a11b3f5602aed5f17b3584fbeb65a5-598d319036edd25f-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4831,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3e8249ef245b150101de2ecd74adf142","sha1":"a6c167a8f33157278b166d46bd7c6715463c0c37","sha256":"2a962c496b9bf3de25419285f7c0751f078502ee1c4321a47591b50bf1be4902","sha512":"17dc7ad1f51008d1c7810cfd2b71d2bdf4dc7d25537cfb80e0df62e41d2b1f6e328fd93e6c0be2ceedccb0db8381cab16d9115e2a37c26165482f8770989fdbc","ssdeep":"48:YDXkR16tcWpROgwcyU/VcyRRyD4HxSixS0t2ltM/L9J9bpcyLlpcy5xp7EqzCe4R:lYcbOo00aL9xJiXMWhH/jHxL81L5m","tlshash":"11a16f0f733c14e53a2941803d0e6e6e7b1202683e626295fa8dd8ad377e5dae13711f","first_seen":"2026-04-09T15:38:38.413902Z","last_seen":"2026-05-02T11:09:56.56245Z","times_seen":384,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_5e1236ede978c82e774f52f937f9a262.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"92.223.84.84","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:40:57.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_5e1236ede978c82e774f52f937f9a262.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://melbet.org/\r\nOrigin: https://melbet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 10:40:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 01 May 2026 12:08:19 GMT\r\netag: W/\"546dafeab7dc1f7c131e262657a7cd5a\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 01 May 2026 13:30:05 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: digi-hw-edge-gc5\r\nage: 3593\r\ncache: HIT\r\nx-cached-since: 2026-05-02T09:41:04+00:00\r\ntraceparent: 00-305971cd955816004ef2cc80ddfc7285-1f87b217013c38b6-01\r\nx-shard: digi-shard0-default_443\r\nx-id-fe: digi-hw-edge-gc8.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155781,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"546dafeab7dc1f7c131e262657a7cd5a","sha1":"1a6120ff3c0de2f23d6a9b60b00ce5ae48a02f46","sha256":"6c9aa19fa89c35ffd5f116bc927e70beda796040d270c293ce685ca88e2c6cce","sha512":"e314b39a1eba5a734ccaffd6a9ab205430b9fda0084956274db57fafb1f183fc7b0faeda162c784fcbf0608b2cf954fe7caa6496321f52d4e9cb4914588f99bc","ssdeep":"3072:I9+H5E8iZcIkZPePfxxlRrPoViMHLuWkc6WrKbMf7JmcpcZv:IEQXlRrPoVimuWUbMf7JmcGN","tlshash":"69e3d80a194c6e7b0bda12edf98fdf4962b000456ab2c822d8eec51e7257fd2917714f","first_seen":"2026-05-01T19:42:34.209765Z","last_seen":"2026-05-02T11:09:56.554257Z","times_seen":23,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8SZ536WC7F\u0026cx=c\u0026gtm=4e64u0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:08.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"GET /gtag/js?id=G-8SZ536WC7F\u0026cx=c\u0026gtm=4e64u0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\nexpires: Sat, 02 May 2026 10:41:08 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154220\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462412,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"a1ec256cd0f416f1b8759db8c980df3a","sha1":"401ab28f53e397203ed61af0af3c4cb74df4d84d","sha256":"6c9f6c854ffa1095d45ba2054bf97a8d2fbb5dc29014e9f98fc3914dfb3817ef","sha512":"6df41e4742bafd0803b39de818fb97a833c6146a07496dbb212472b69f33cbab4a0ce4fbf21b2bc690dce6e8c8588531db43434b7b9f5ec901705af74b6de0e1","ssdeep":"6144:Sog413bxKKjZyk8Tr9Aw1CmBHf/VdLXoDeClhf6:zbxKqT8Tr7VXd","tlshash":"daa408ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","first_seen":"2026-05-02T07:11:57.856275Z","last_seen":"2026-05-02T10:41:25.116765Z","times_seen":3,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-8SZ536WC7F\u0026cid=682636302.1777718468\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938466~115938468\u0026z=57783682","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","date":"2026-05-02T10:41:08.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:21:55 GMT","end":"Wed, 01 Jul 2026 05:21:54 GMT"},"fingerprint":{"sha1":"72:FC:60:7E:7B:61:3F:60:6D:5D:44:4B:8C:4A:7D:06:38:84:9D:A6","sha256":"9B:56:CB:E2:46:37:E5:19:5F:89:43:5F:F7:61:72:8F:11:C9:8F:E8:B1:92:24:F8:BC:3E:F1:C6:F0:2C:91:DE"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-8SZ536WC7F\u0026cid=682636302.1777718468\u0026gtm=45je64u0h2v894765892z8894758050za20gzb894758050zd894758050\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938466~115938468\u0026z=57783682 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://melbet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 02 May 2026 10:41:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-02T12:28:39.036266Z","times_seen":842345,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"melbet.org/en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow","fqdn":"melbet.org","domain":"melbet.org","tld":"org"},"ip":{"addr":"91.186.206.142","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T10:40:56.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"melbet.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:22:35 GMT","end":"Mon, 15 Jun 2026 05:22:34 GMT"},"fingerprint":{"sha1":"B8:02:AD:AF:48:17:76:A6:47:8E:09:44:D8:74:61:6E:D6:26:B6:EA","sha256":"79:0A:2B:69:8E:72:E0:E8:DA:72:CF:2E:8E:58:67:DF:C1:90:1E:25:A5:B0:06:F0:38:18:EA:CE:3B:97:87:56"}}},"request":{"raw":"GET /en/block?tag=d_4625118m_59735c_lkFirstDepYellow_1vl47i613olm58\u0026pb=84c5aa76beaa427d8eb360c03fb0f2da\u0026click_id=1vl47i613olm58\u0026r=promotions/first-deposit-yellow HTTP/1.1\r\nHost: melbet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=W7rOjmn11LhUrgReA9f5Ag==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sat, 02 May 2026 10:40:56 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2829\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.096, dt_total;dur=0.008, total;dur=3;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 05 May 2026 10:40:56 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 62, 62\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2829,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1299)","md5":"5a2fb9f2b4c1583ad34a52b9b6e1737f","sha1":"489ca2b8a46b157c725dffc7de375b93cc499581","sha256":"1cd0d96a461fec071a799e339cfa9ae97fc51b7e0b3da86b2f02d79d3a78e8a7","sha512":"b7356bb2c47cb538744bfb2be6e4bc2ec06c23d3b75e6d527188d531fd0da127ec12db4df6baa8e348410083863b2490beb264d8dbcb951c091b1667fdb1dc17","ssdeep":"","tlshash":"5051b72b5a28ce3f05106458d623e39ae5cc71bb714b9498c0b84d1a2b4f7d3ad8f8e5","first_seen":"2026-04-29T21:38:33.085559Z","last_seen":"2026-05-02T10:41:25.100415Z","times_seen":9,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}