{"report_id":"e5ba205d-e39e-4f1b-bb3e-8f1629a88a57","version":6,"status":"done","tags":[],"date":"2026-04-26T15:35:48Z","url":{"schema":"http","addr":"betwinner-13111.pro/","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"betwinner-13111.pro/en/block","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"title":"BetWinner","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T17:43:01.324879Z","times_seen":17940036,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"betwinner-13111.pro/","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-31T15:35:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-04-19T22:40:39.923967Z","alert_count":0,"request_count":1,"received_data":853,"sent_data":884,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"216.58.201.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-04-19T22:40:39.524002Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":678,"comment":"","tags":null,"fingerprints":null},{"fqdn":"v3.traincdn.com","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2022-11-10","domain_rank":256434,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2026-04-23T09:38:13.388665Z","alert_count":0,"request_count":26,"received_data":3299468,"sent_data":13179,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adscool.net","ip":{"addr":"172.67.175.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-27","domain_rank":54136,"first_seen":"2021-12-27T12:04:53Z","last_seen":"2026-04-23T22:05:05.237936Z","alert_count":0,"request_count":2,"received_data":6989,"sent_data":1035,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"betwinner-13111.pro","ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-26T13:29:14.374514Z","last_seen":"2026-04-26T13:29:14.374514Z","alert_count":0,"request_count":14,"received_data":72857,"sent_data":10427,"comment":"","tags":null,"fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-19T22:24:53.213297Z","alert_count":0,"request_count":4,"received_data":1677859,"sent_data":1792,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"betwinner-13111.pro/en/block","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"69b513117f8c7ec8874b0f209d6f0e61","sha1":"3382c95c98c7a3e1e4a71dbc37400c3f70c0a822","sha256":"4efc42152a91d669aef892bb505fd6810623532be691eb2358195eaf24e80b70","sha512":"f9b6954cc5ba58e88e32b64773afcbe5766e3181a0c23c956d2fb19e2302b9faaa70c0a335ab33d8522e454fdfe35d0bee5a25fe3998b896971e26aee92b5a59","ssdeep":"","tlshash":"6e21622a1b1c8733455890aec162b3e394f261663501946cd4798c12aa2b7c3aecd8d2","size":1239,"data":"","first_seen":"2026-04-26T13:29:20.565754Z","last_seen":"2026-04-26T22:21:48.164193Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/0ed4795fbe.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"814b68a553b9ad785c14d9dae52f1a6d","sha1":"44db29d19d8e0cf36be1a8b91e31d1d4bd037931","sha256":"1ea85f5f01c5b3b966c6e7738f69622df177bb073efad7bb88b8376c96cdc2b4","sha512":"91d266d40c634c41ebea1c969c99e4387bfb6318253850f691b09c089d5f0564efd8c14545476963f6f9c19e72e6a40054d9f91398e419014859e89d676c376e","ssdeep":"","tlshash":"602171be6db0e034a7502eee3c24253243c83993914ba4976acc43d803970284e38fbb","size":1234,"data":"","first_seen":"2026-04-23T19:54:27.70169Z","last_seen":"2026-04-26T22:21:48.144634Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","size":389,"data":"","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-07-24T08:16:23.48126Z","times_seen":1789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adscool.net/resources/content/betwinner.js","fqdn":"adscool.net","domain":"adscool.net","tld":"net"},"ip":{"addr":"172.67.175.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66d4f7d48ed827c5259f415c96f124d1","sha1":"6a87e82fd1816b39d5c1a3757d13ec3861a60249","sha256":"c23923e590a1554874894d96a9775963e5590e3928aa9f99e5f6b110e5f12ce8","sha512":"666c54e5cb62939cea5020d55436827e4ffb009536be28d2eaba18a549153ad468032a31e9c3e9c81ff5b78c79b11d55002a476930c08bbcc7a89b891142070c","ssdeep":"96:yN9816tzFDICp+1ftyLHJsbp7aCg16vRFO6uQS:c810CCp6tyLHJsbhaCg16vRFO6uQS","tlshash":"a5a12089b1d57834438711b6082f814db236642c94da817cb79be4d6bdba80c273bf7a","size":5040,"data":"","first_seen":"2025-11-11T12:36:52.911773Z","last_seen":"2026-07-14T11:27:17.692138Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/en/block","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dafb343aac3fe5ca646b209532d36997","sha1":"53e7e61d359e4302e8a8a993ef87941addbdcd3a","sha256":"27054e18281f5b986021cef8efafab9b9fbf6b6dc64a0027cca8bbb3050dc6d4","sha512":"2431a1f17b00f26dd58d329f3c4bcd32aeacc95ece9d1ac6086772ba90aa32700431daabebc5431f41654b2018b3bb9638215e2c0953c16188a17ccc8673c125","ssdeep":"","tlshash":"f6e0cd969519f61b5c33681d896c8b0f95c97e75500d795dc034855c3a53456106723a","size":308,"data":"","first_seen":"2025-12-10T10:19:59.465768Z","last_seen":"2026-05-19T09:54:34.325552Z","times_seen":1816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","size":57,"data":"","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-19T09:54:34.316022Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/75c180abd3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"107150ebe5913feb7ade00b3b7bb73ea","sha1":"909c35d08f5b997b76d0a6e94bc900b9d0233b5f","sha256":"9e5e5694a44a19ce4b4d1ecd2c673aefe0e3d8f22188f14d4c40a2c642eaf2da","sha512":"92053d37c4a8e85a7384143a04bd37dec329052ab967faaf7e4906dd78b2de06626b87ae0915ee6d23a8dd59efdeac9a1c4e370639a437c665d01f9c3a9de341","ssdeep":"192:FhMoQfDblu7WteFsNyRTF5Lk55h/WX57Xh3PfuMuvzXeuv5xOzHl0Ue/jud:HxQrblu7WteFsoRJFQH/WX5XhfWn7uuS","tlshash":"a612c9d82df860779b638399bc2290b19b0a4a54a10d44dbf5f84f1c059e4cd9ebbb73","size":9107,"data":"","first_seen":"2026-04-23T19:54:27.708063Z","last_seen":"2026-04-26T22:21:48.140374Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-S6SBTBM9JC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85ab3ea2376007240271f82f5ff46f97","sha1":"0c5745bae97e5b0c70cf8e5a9d27ac7d2f226199","sha256":"49d32173fbbe3f166f59a72283f76ce480d07edc353a80ef69bf8bdbe73f57cb","sha512":"9d9d8adf0b5513aae387daebc9b4b44b318ed946ed35d5c45ce459d81c16b805308f883df3b7a2c61ac039185ba4b3d14ee351f72ab7758815b55101aa1bc203","ssdeep":"6144:hkiiFze4lE4kYd2OguHKyoAqDUZApASTbqVw43d+h7j:hWzZkYd2dyoAVE","tlshash":"49c409ceb3d674625296f478903f01cba97b24a2b45cc8abb189ccf02d3465a5177f78","size":543153,"data":"","first_seen":"2026-04-26T15:35:55.631735Z","last_seen":"2026-04-26T15:35:55.631735Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/en/sandbox%20eval%20code","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-H70E6H8WMK\u0026cx=c\u0026gtm=4e64m2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f8ab97ebc78cec879a3048b7e458bd8","sha1":"a4a9bc893c0376b596c79959655f74088ae37c2a","sha256":"4df136984b0b15b13b19662ba419ca043d98932d08eaaf886857ab95f09fe7f9","sha512":"f5a9db0b4432fe757a62637bd768beef490548477516b7c348eca572d2ff8a7625be4f1637e701314c5c6329bfda2908a7d79ef02aa78184e0ee322dce6864f7","ssdeep":"6144:sziFze4lE4kYd2OgDoIIDUZApASTbqMucNjbGJb:7zZkYd2zoIKS","tlshash":"7d9408ceb3d674665396f478903f018ba57b28a2b44cc89af189cce42d7069a4177f7c","size":437228,"data":"","first_seen":"2026-04-26T15:35:55.617749Z","last_seen":"2026-04-26T15:35:55.617749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/en/block","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1df90b63cd87136babac18cd4e1e120e","sha1":"b398a881c9c9a0db7a50f76d0d5150ff7166311e","sha256":"affcaa29f182e808194c1614e2c14979f63dcd48ed6ba906a8fd10f1a31b5789","sha512":"3786bb1e1a07a69b4c1eb0b40605ed1c9d8df8bb967c36c144b466408633e2eaae05c455624ca3f2da831e9dfc36743a540c1cd851c39e9262e70f3db16abe34","ssdeep":"","tlshash":"c46000200000002800a0280022222a002288800000000a000080820a28aa0030800080","size":15,"data":"","first_seen":"2026-03-12T22:10:14.591684Z","last_seen":"2026-07-26T07:36:09.674108Z","times_seen":1869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/entry-c46e5ca2f5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76fe338a95264236ac3cab73eed27c00","sha1":"726aa478a5a443009a0261a3aa715e1781f6fdff","sha256":"c988bb1d8ba2c216457c58076526c9ac0ccb537f74c702b9b8a7c959f33f5c2c","sha512":"40c9d0322b3036432b994fe62b3f714e78d289fa0b5dad16702cc0fede0d860bf2ec6993953d7108dfc6ca2b4cd635951c8cae932b9880c1e33aebcd6ff43ca0","ssdeep":"384:Hv3EwUMs5dKo0CzA4e/y/Vr4LcD7KbnwcjQ/lT+oUE0z3aMpGLV6hcYIgRCs:Hfxo0CzA4eYVr4LcD7KbnwcE/d+oUdzF","tlshash":"7c921078219cf0b930cb449537f6bc9266886d5ff98afcc64187c9dc03da14cc9267aa","size":20324,"data":"","first_seen":"2026-04-23T19:54:27.705073Z","last_seen":"2026-04-26T22:21:48.157386Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/591c2f5a23.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7690fc9f03c7dedfb83c52b6d6a5fe75","sha1":"4492ee79afcff94e32fa4303ba33c2a9a3e9b7b1","sha256":"6eaa7dd1270fe349d56b8766c23094438fc69b585e6c3e6bc2561246322a0fb4","sha512":"fbf8d4447e97fc5aee951b12b53dc2f41ba3f85cd2637c1ef802a44f879fd14469c9237f50225fe4df64a2cc8dcf99a52820dcf083bb7d5d50a99ea9d96122af","ssdeep":"","tlshash":"1581c85e1ef874b8211d0faf6f5338e40aa48c12e39c9477ea460f390339055e6399b7","size":3879,"data":"","first_seen":"2026-04-23T19:54:27.690126Z","last_seen":"2026-04-26T22:21:48.14523Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_25447bf1bd.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"5b12ebbf733049a056826174dec7d075","sha1":"823c65ac2647c08dc54018f274943fc0dc0e526e","sha256":"92cda3f04080562436d12f85a349ad751ac5181556a2627a9086e5f7103c96ec","sha512":"13b7c890e7b98a5fc4ce4322b35936ff4e4e913c63d416d7f13c8fbcff2a7064da6db3e70ecf3cb734044a0ff5c84091d79889f3eada87e9b9b0a6b0be93fae0","ssdeep":"49152:1Q/A3ErJ5NkG1vkEjBOrXg2O2qkOmdUAYjjI:vpdUM","tlshash":"86859ea1f281bc2b1fdb57d7a0630005a2ad1d6dc418f490f5daede939de884916fb2c","size":1743226,"data":"","first_seen":"2026-04-22T00:53:54.285888Z","last_seen":"2026-04-29T10:46:14.621928Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/e6b27c267a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"641ae4b54fe0680a58fa13b5520f38cc","sha1":"02b4fdfc80676e514b699e0d2e74029394bdd4cf","sha256":"f97c9a9a29db474332da70ec84c72ba85989416a15b903b4e8fbbac7e6ebae78","sha512":"eb4e47c2c497371272566a7a2628e971b43a423e7a41c9e79fbefc3822e5015ca5bc84faeb382b3b40bf962f1aae88ba038cda5079627e150050d44d2574b60c","ssdeep":"","tlshash":"cf7183497cbce4fa7f1343893c9070b0a34a5c29911c04a3e4f58b9c569e694872eb9b","size":3610,"data":"","first_seen":"2026-04-23T19:54:27.697999Z","last_seen":"2026-04-26T22:21:48.129976Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/en/block","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b52c90d207c4f72caec11be1d2bfb41f","sha1":"c6c5a0ca82194e8a8928108a2d4e92eeb21e0dc2","sha256":"f7e1aa2be6c0ae886652affcc20dfbdb9ba889fe118e3d4386d4ed39c6a1723c","sha512":"469326a884f50b4ca55f15bcdde87a0b936ddd656b37d174047fea49d6ed346e72ef9c2f0e170bd66ee9d90a075ce8b7f38da4f11e5ad2c20e07634d16e8bad7","ssdeep":"","tlshash":"0dd02b3b01682931aa1a24a6a0719b592950602d68035933c25ed904b8b8dc004f2a4c","size":273,"data":"","first_seen":"2025-11-11T12:36:52.956766Z","last_seen":"2026-07-14T11:27:17.734078Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5JZK2JQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30a9f7e573152a104d19966b85311f79","sha1":"8a4f58bf32efe4d81defc0521bdd4fbe11234490","sha256":"e30b025ce8ecb65e5946d0fbbfabb93e7fe16ff6207353a1489d0d398579cbe9","sha512":"79ccc762ed0cff375420f34cfee3548ec0e157f879f94f6203765f39e7b6b314681df524630839b2b7c9803f49d2541add417db7f1af7feed3be91b09de2c350","ssdeep":"3072:XiBCNWHzdkfuzVo4lEHadeB0RjaMbBaAyCQsVjgzLLA6UeCnwvpASTbquC2VqNGs:TiFze4lEHad2Og3LDUZApASTbqj2V5wx","tlshash":"ac6419cdb3d6746283a3a478903f114bb23a7892f84cc899f185d8d42e74a695277f7c","size":335964,"data":"","first_seen":"2026-04-26T13:29:20.496409Z","last_seen":"2026-04-26T20:32:09.018664Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-222706647-1\u0026cx=c\u0026gtm=4e64m2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e75c3c2412e77a7de704b5f6c1abf354","sha1":"6322ab50170724b3f66da169b554b840a2b331ee","sha256":"c420389eb07824e93563180086a2515ebe7574b63c77d74d0489ca0e4f720d96","sha512":"baad3ba50be78256f1ccb9e215e5018e34fc2ac784e59d1ff942ae58545b1e18fe3bdb29bbc6b84ffd4512ec9c2b201166b9a75a8bc32bb6b142f04da083b453","ssdeep":"6144:4iFze4lEHxdMOg3LDUvApASTbqn6qLd8zA2o76:Xz2xdMnOVd8zP","tlshash":"b87419cdb3d674669393a478503f018bb23a7892f84cc899f185c8e42e7469a4277f7d","size":359044,"data":"","first_seen":"2026-04-26T15:35:55.617007Z","last_seen":"2026-04-26T15:35:55.617007Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/en/block","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3dc2aaafd81cbfcaae82abcce64bfc99","sha1":"08aac191cf62c006fd6f8d683e4425025272c450","sha256":"45fa8b7b24b26e597887e4bfdfffd92f1d2f88a395fdc7d791eed5475c6004c0","sha512":"f03cf795f7b60c1f285d74422e5623343fdcb0f41782269c7899cb4e3c68ff411346cdcf4bfd4d8d062a51173426fcfe92fc21b2c3760729e6db61afd8115bb5","ssdeep":"","tlshash":"ef017b1f81651d7f22015d04cb039618b7cc21aa72df6050d1a80a2a678e7dbad1a9e4","size":703,"data":"","first_seen":"2026-04-04T23:30:58.776743Z","last_seen":"2026-05-17T18:34:04.44565Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/152-495/desktop/media_asset/0c9c67ae4e6a7d16a327dd2fc3d8c2f9.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/152-495/desktop/media_asset/0c9c67ae4e6a7d16a327dd2fc3d8c2f9.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 08 Apr 2026 06:43:38 GMT\r\netag: W/\"e25d2793de708df0bf1008db89a59775\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 08 Apr 2026 08:30:17 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 2794\r\ncache: HIT\r\nx-cached-since: 2026-04-26T14:48:52+00:00\r\ntraceparent: 00-a630d288cd31e1d1885dd9b946bc7e4c-98ee25d0a3c9ee04-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5288,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e25d2793de708df0bf1008db89a59775","sha1":"b41d28068ba2af1135b44641d0de0702c7efbc93","sha256":"61db2223ade2dceac1c26c7bfeeab2b05d319846c70bc742f431bd12228414f2","sha512":"85fa262315160e4f7bbcbb3e9cc76e7ea232efec60ecf024efa9e5de84a282fd38ed4b48d647be91f1aa75788120921f7098132b97bd105dde9e4fb27f8569e7","ssdeep":"48:TzABItkAp5gAY8AehgHAB0EABzzuFABIIv4ABBxS/sABYEwABOt73ABBidABJyAO:FLet4ljvL33lx/dDwLH","tlshash":"37b12b89fff09873001fa4b8d8f7ba4aa7c40f1ba85a9d287f9d34091f145054466dbe","first_seen":"2026-04-10T00:46:08.760771Z","last_seen":"2026-05-31T13:33:10.636259Z","times_seen":23,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adscool.net/resources/content/betwinner.js","fqdn":"adscool.net","domain":"adscool.net","tld":"net"},"ip":{"addr":"172.67.175.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:36.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adscool.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 20:05:09 GMT","end":"Sun, 28 Jun 2026 21:03:42 GMT"},"fingerprint":{"sha1":"85:EF:59:97:17:59:49:82:25:5B:6B:F5:A1:7B:25:D4:89:8A:C2:68","sha256":"C0:49:DD:50:E7:D2:90:D7:7C:55:93:5C:5E:B0:72:D0:F9:AF:19:CA:D6:96:CD:D6:99:E4:85:60:D3:82:33:1C"}}},"request":{"raw":"GET /resources/content/betwinner.js HTTP/1.1\r\nHost: adscool.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Apr 2026 15:35:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nstatus: 200 OK\r\ncache-control: max-age=604800, private\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nx-request-id: 13477ce3-ee14-49e8-933c-eb8384d5ee02\r\nx-download-options: noopen\r\netag: W/\"c23923e590a1554874894d96a9775963\"\r\nx-runtime: 0.001910\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzYz83dCagYlsdskHLN6mC%2BkyGQgo%2FA03zhiJPRCESTdtk%2F5zQNKpmVsBpHZaKBgkKRcBb5EdpcNGSL9YMytM1YazYNuwUN3k5pVDnUUt44UEM3RZdKjtKdU7zPpZw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f26a8873b840b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5040,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (514)","md5":"66d4f7d48ed827c5259f415c96f124d1","sha1":"6a87e82fd1816b39d5c1a3757d13ec3861a60249","sha256":"c23923e590a1554874894d96a9775963e5590e3928aa9f99e5f6b110e5f12ce8","sha512":"666c54e5cb62939cea5020d55436827e4ffb009536be28d2eaba18a549153ad468032a31e9c3e9c81ff5b78c79b11d55002a476930c08bbcc7a89b891142070c","ssdeep":"96:yN9816tzFDICp+1ftyLHJsbp7aCg16vRFO6uQS:c810CCp6tyLHJsbhaCg16vRFO6uQS","tlshash":"a5a12089b1d57834438711b6082f814db236642c94da817cb79be4d6bdba80c273bf7a","first_seen":"2025-11-11T12:36:52.911773Z","last_seen":"2026-07-14T11:27:17.692138Z","times_seen":52,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":24,"dns":5,"connect":1,"send":0,"wait":131,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_0fcc3a.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_0fcc3a.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 14:13:32 GMT\r\netag: W/\"bc81edf98a9e03145e7995a357f97beb\"\r\nx-amz-meta-mtime: 1777039813.963034897\r\ncontent-encoding: gzip\r\nexpires: Sun, 26 Apr 2026 09:10:48 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 22902\r\ncache: HIT\r\nx-cached-since: 2026-04-26T09:13:43+00:00\r\ntraceparent: 00-19f90c491a66744163fbd0f1caabb5dc-18d13fe48593e919-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23439,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13051)","md5":"bc81edf98a9e03145e7995a357f97beb","sha1":"f76d3bbcea31441811616faea48b0a8a2281b78f","sha256":"0fcc3ab8d2686a54418e74aa8a9972b304d9ada6efd821d643a04cdabfc93c01","sha512":"5c2e4999d835fb3663e6886d438b9023cb3e0a4ff32ab908adf381033185cf0757b0546d25b2fa80a7d346a4a893f9d07fd0ade14a28a79ce83aef8f06f20112","ssdeep":"384:jBEY441c8VRTnhnmb8oas+5CxsscvdfAXjCaVYe8+rxdYAktm4r:joas+7","tlshash":"19b2431dece495736e27a521538cbe7c15f4f42bee320e59f81e832016c3baa14e1d69","first_seen":"2026-04-09T10:33:51.203793Z","last_seen":"2026-05-27T09:27:36.508614Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":42,"dns":1,"connect":9,"send":0,"wait":9,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/bff-api/config/group/get?groups=b.core,d.core\u0026lang=en","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=b.core,d.core\u0026lang=en HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.114, bff;dur=23.31, wf-uht;dur=0.113\r\nvary: Accept-Encoding\r\nx-dt: 495\r\nx-pod: R-c9n4s\r\nx-time-ng: 0.096\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":47950,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ca6372b9c28f2cb2e04bcc3bd4e920fb","sha1":"48b36fd2d3e42dcec69c2ffbe286b3616f5b2146","sha256":"e8f26ac45870d49f2f0403b4ade6a122366a3090482d026bc11bfec3e33b1299","sha512":"9d53694663a2cc4df91e9fb52a68cb5faa827049b89265ba2b2de362231405b73cf0010997d809986c613edba819cfb94a104e3545cef81a1bdd144f28a0eb11","ssdeep":"768:A/HBlAU6ifNylqYfxv7FAcJrgOcbzX+0v5FXDO0lgWZvlDA:sHLnfNynfxZAcJrtyzX+0vfXC/WTDA","tlshash":"2923fe5f76d05a37812f6eb9cca3ed0e5be80f1f1853a06699e73d82247291444e34be","first_seen":"2026-04-26T13:49:55.940791Z","last_seen":"2026-04-26T15:35:55.605112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/4.0.11/Desktop/Default/client.l.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-ui/4.0.11/Desktop/Default/client.l.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Thu, 16 Apr 2026 07:28:24 GMT\r\netag: W/\"a1a9bc6c1fd8b87462cb31ed267babf2\"\r\nx-amz-meta-mtime: 1776324499.795563323\r\ncontent-encoding: gzip\r\nexpires: Wed, 22 Apr 2026 13:14:33 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 7837\r\ncache: HIT\r\nx-cached-since: 2026-04-26T13:24:48+00:00\r\ntraceparent: 00-b7586f234caec38b8465789b6c350519-8a44382ba3235aac-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":629191,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (32117)","md5":"a1a9bc6c1fd8b87462cb31ed267babf2","sha1":"0f7886dec15e6be917dd94283d03fa892f694a1a","sha256":"3f66cfcf9021f1d5564c38b000a953d353cb15307edcf423cdb56c8cd00bff24","sha512":"14139b596ce80cde1b3e9dcaa3ea0c61800d09fad50d6de7cd26f45b3619a792afdbb5670e82c134a6cf2f848830bb73b38057c4721e8fd011c710d8e77094f6","ssdeep":"12288:p0Qug6sZB+DgRqplNY5OmaycMQk1t/APV87vAS3:yYB+qy87vAS3","tlshash":"edd4841cf19d96393e37e52142989efc2630f357db221d6ff45d02890ac366361a2ea7","first_seen":"2026-04-22T00:53:54.251059Z","last_seen":"2026-04-29T10:46:14.505892Z","times_seen":150,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\nX-Fc: bf5383e14dd845a2502d668a43c9fa310c8ebd46e38c7a767b68fb7db0ff7e28\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 495\r\nx-time-ng: 0.000\r\nx-uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.083, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T17:43:01.324879Z","times_seen":17940036,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_092441fd9e119a0aa627b127d0943689.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_092441fd9e119a0aa627b127d0943689.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Thu, 09 Apr 2026 14:08:33 GMT\r\netag: W/\"3e8249ef245b150101de2ecd74adf142\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 09 Apr 2026 15:24:22 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 1250\r\ncache: HIT\r\nx-cached-since: 2026-04-26T15:14:36+00:00\r\ntraceparent: 00-3d8592187fb17a977d71ca7830d76517-4ac9b4269318a48b-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4831,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3e8249ef245b150101de2ecd74adf142","sha1":"a6c167a8f33157278b166d46bd7c6715463c0c37","sha256":"2a962c496b9bf3de25419285f7c0751f078502ee1c4321a47591b50bf1be4902","sha512":"17dc7ad1f51008d1c7810cfd2b71d2bdf4dc7d25537cfb80e0df62e41d2b1f6e328fd93e6c0be2ceedccb0db8381cab16d9115e2a37c26165482f8770989fdbc","ssdeep":"48:YDXkR16tcWpROgwcyU/VcyRRyD4HxSixS0t2ltM/L9J9bpcyLlpcy5xp7EqzCe4R:lYcbOo00aL9xJiXMWhH/jHxL81L5m","tlshash":"11a16f0f733c14e53a2941803d0e6e6e7b1202683e626295fa8dd8ad377e5dae13711f","first_seen":"2026-04-09T15:38:38.413902Z","last_seen":"2026-05-13T14:11:32.403018Z","times_seen":593,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_f4fe64372144c7e3357a64d4ad703465.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_f4fe64372144c7e3357a64d4ad703465.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 18:08:57 GMT\r\netag: W/\"9546acb8ebf48a10ebba775dfab50691\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 24 Apr 2026 19:37:04 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 3234\r\ncache: HIT\r\nx-cached-since: 2026-04-26T14:41:32+00:00\r\ntraceparent: 00-154267aeff06b1dfa38743fcce0fd912-88db26740cf6ce1e-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155509,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9546acb8ebf48a10ebba775dfab50691","sha1":"9a7e0faefec33e5956980b0cf8a9c815667a3d11","sha256":"552a714c24844ac4ffad3260cca77809b7e241842c05c99ff9e8a055a333fc9d","sha512":"8c9968ce1646d18f7308440699e4e83a9761a200443a6b59d049718c240f70fc949799f4c42fa21f622434870fe3d5c76e95472836fc2c9c8088e815429680a3","ssdeep":"3072:Il+H5L8iZcIkZPePfxxlRrPoVijyLuWkc6WrsbMf7JmcpcZv:IfQXlRrPoVi2uW2bMf7JmcGN","tlshash":"96e3d80a194c6e7b0bda12edf98fdf4962b00045aab2c822d8eec51e7157fd2917714f","first_seen":"2026-04-24T23:07:37.746909Z","last_seen":"2026-04-28T08:09:03.480826Z","times_seen":88,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/e500740163a3f6b6c54c30074e8b94af.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/colors/e500740163a3f6b6c54c30074e8b94af.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Apr 2026 11:42:07 GMT\r\netag: W/\"e500740163a3f6b6c54c30074e8b94af\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Apr 2026 12:48:16 GMT\r\nx-time-ng: 0.005\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 691\r\ncache: HIT\r\nx-cached-since: 2026-04-26T15:23:55+00:00\r\ntraceparent: 00-0cfebe37af47ac1a7180cbf58c51a257-0228d520324eacaa-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":36481,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36481), with no line terminators","md5":"e500740163a3f6b6c54c30074e8b94af","sha1":"6e3a1ae239677854bea857a08a2dc2738250f82f","sha256":"63940ae829439e2c9c33a35a9b79cf603f996dc16697e8b478a1a152be441ad7","sha512":"9d3775ceb1c970a19584e73e48c935a9ca15c70a23a87c70037c5f0137dda70b70b7e60deccba5f60e1e37cbd0c3951626ea07379a558c487a135825e9d11411","ssdeep":"768:1kZeLiWjPazD4Pn6FYkPnLVQH0dV+S92dgDEZIGV/ZPq8/iai7JYAdgu6g9PQJDV:LiWj7kPnLVQH0dV+S92dgDEZV25+vI+J","tlshash":"b7f28e3edd91d5721a6e1932c52c562e2d3bd58e2a640f8bd12c33a970c57026bf0fb6","first_seen":"2026-04-23T19:54:27.694427Z","last_seen":"2026-04-26T22:21:48.153499Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/152-495/desktop/media_asset/1a5f8af15e37c3b70f0635cb1a7797e3.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/152-495/desktop/media_asset/1a5f8af15e37c3b70f0635cb1a7797e3.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1742\r\nlast-modified: Wed, 26 Jun 2024 08:52:40 GMT\r\netag: \"07f85071dec8da39aa5ccd9157d8f79d\"\r\nexpires: Mon, 18 Nov 2024 09:31:25 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 115\r\ncache: HIT\r\nx-cached-since: 2026-04-26T15:33:31+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-0718724c9f4c0b019c0cd06f212f38c5-5c1e633713aea278-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1742,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"07f85071dec8da39aa5ccd9157d8f79d","sha1":"2dcc481c6da8a208cb7814732c60bcacaad16338","sha256":"5c85130ce1221fb01ec396cf79949c58ab84027c7120afec61f5cdadb74a94a2","sha512":"e63a7d11ed67df96b54a83dba4e85cb911bad97bfe069da0574471c691e307b7f9e1ba90d022283b1eff316a19ed7c608cb3cc84bae97b7686c10bb5eb56e4e5","ssdeep":"","tlshash":"b8310b6e71d4357e68c9c164dd1c8624ff92504d8b2f6f2f2eb3ce0d844822c26646e5","first_seen":"2023-04-11T05:44:03Z","last_seen":"2026-07-14T11:27:17.691562Z","times_seen":668,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/en/block","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2836\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.107, dt_total;dur=0.009, total;dur=3;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 29 Apr 2026 15:35:25 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 495, 495\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1303)","md5":"b4d2383e8f15e6c2759383c94c8845a8","sha1":"db9df5120b7c99f31d210cb05e0fb7df110d9266","sha256":"a2f9e1da31d967c8a4f362fae1c56ffffafc5ae16573b711cfb99a885c6bb3ed","sha512":"da6f375f363626a03c67e4b79120f2c9ee65ff687eb6270c5e60cd0d5b3bb1d5c6778d5aa624a69882bfebaf5caca86ae6cddd5955572ebf5845be631052ff25","ssdeep":"","tlshash":"2f51972b5a28ce3f05205458d623e39be5cc31b7714ba458c0b84d196b4e7d3ad5f8e5","first_seen":"2026-04-26T13:29:20.558947Z","last_seen":"2026-04-26T20:32:08.867823Z","times_seen":4,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/bff-api/config/group/get?groups=d.customize\u0026lang=en","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.customize\u0026lang=en HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==; lng=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 925\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.129, bff;dur=35.87, wf-uht;dur=0.047\r\nx-dt: 495\r\nx-pod: R-xgtq5\r\nx-time-ng: 0.037\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":925,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b989c5e738972c09cf12b31c6c489969","sha1":"59922e2d879d57e46faadf434878ddc71d90c415","sha256":"53a6c26211ff2ab77342190aed1d54eb542c2bb75de290ccaaf2bb2673fdabe8","sha512":"2c05376e00291fc6c0d08912f6b56e6144482dcb69dfaf42bb4bf48e0de7b287b7e723bd4174a1e7412ad3a4517f3a028de5d80beef125fc42ce5883a8030401","ssdeep":"","tlshash":"0811284ed1a0623c9aa04bd9d9823f149ff5c097384d7a01ec199dda33d39ead1b1307","first_seen":"2026-04-25T09:12:57.35115Z","last_seen":"2026-04-26T20:32:08.874807Z","times_seen":6,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.104, bff;dur=14.24, wf-uht;dur=0.027\r\nvary: Accept-Encoding\r\nx-dt: 495\r\nx-pod: R-kh9jk\r\nx-time-ng: 0.017\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f2e68fce233ee71a3fd29f235a91d8f","sha1":"7150b821f566ee8c87b1486ac0e1ffcd1a336187","sha256":"abe31ba6ad5ee4bea32acfdfe203453534b5618f0faf59620eed83da45f31ba5","sha512":"9b50fe01487dfa55b78d743786a53c2ec86754cab4b24db4659f8805c48b54ce0eb6e24a8e3fb10204e72d9835e389b13034f0c3a2b90ed6161d4f6302326efd","ssdeep":"","tlshash":"1431475d20b1893c20690676db816e449fbd801f35907a85fe0c999cb1e3deefa7110f","first_seen":"2026-04-26T13:29:20.554914Z","last_seen":"2026-05-17T18:34:04.388204Z","times_seen":9,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/e6b27c267a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/BetWinner/e6b27c267a.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"641ae4b54fe0680a58fa13b5520f38cc\"\r\nx-amz-meta-mtime: 1776840779.714190218\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:14:54 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 27468\r\ncache: HIT\r\nx-cached-since: 2026-04-26T07:57:38+00:00\r\ntraceparent: 00-c2e9fd50da8eb20131a5d862d26991e4-5a0e0a4eedefe2a7-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3610,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3520)","md5":"641ae4b54fe0680a58fa13b5520f38cc","sha1":"02b4fdfc80676e514b699e0d2e74029394bdd4cf","sha256":"f97c9a9a29db474332da70ec84c72ba85989416a15b903b4e8fbbac7e6ebae78","sha512":"eb4e47c2c497371272566a7a2628e971b43a423e7a41c9e79fbefc3822e5015ca5bc84faeb382b3b40bf962f1aae88ba038cda5079627e150050d44d2574b60c","ssdeep":"","tlshash":"cf7183497cbce4fa7f1343893c9070b0a34a5c29911c04a3e4f58b9c569e694872eb9b","first_seen":"2026-04-23T19:54:27.697999Z","last_seen":"2026-04-26T22:21:48.129976Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/bff-api/config/v2/contacts.json?lang=en\u0026country=137","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"GET /bff-api/config/v2/contacts.json?lang=en\u0026country=137 HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1280; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.084, bff;dur=4.29, wf-uht;dur=0.018\r\nvary: Accept-Encoding\r\nx-dt: 495\r\nx-pod: R-dgck8\r\nx-time-ng: 0.005\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":4742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e5c6e3a0e0611da20d972faf27d1dd9a","sha1":"76e96048c2d8ec6e94f12fa2273bd1f604789322","sha256":"bd867490cb9318063fcd4e98f68efea5d5da4f980706c0d5738d4ea2ac8d833e","sha512":"2f7b7cbd5cf51ac807d59eb47426c2be226acab6ac5c39cee1397e1c153bd05667cf1a7e276029c3497aa8919fd58c0d0414535b0ee7e6c392d60a0d51de73db","ssdeep":"48:YLfWseEQyvsFseHQyFe3sehQy9se5H4DehDQy5NQ+JaxJj5JZJ/JvJTJXJ7PJXJi:XDfq","tlshash":"12a116197121cd79a32917655c928c8a91f501860efc7ce2c8fecee4b9f0f90536a6cb","first_seen":"2026-04-26T13:49:55.913872Z","last_seen":"2026-04-26T20:32:08.971763Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-222706647-1\u0026cx=c\u0026gtm=4e64m2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:36.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=UA-222706647-1\u0026cx=c\u0026gtm=4e64m2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Apr 2026 15:35:36 GMT\r\nexpires: Sun, 26 Apr 2026 15:35:36 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 26 Apr 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 124498\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359044,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"e75c3c2412e77a7de704b5f6c1abf354","sha1":"6322ab50170724b3f66da169b554b840a2b331ee","sha256":"c420389eb07824e93563180086a2515ebe7574b63c77d74d0489ca0e4f720d96","sha512":"baad3ba50be78256f1ccb9e215e5018e34fc2ac784e59d1ff942ae58545b1e18fe3bdb29bbc6b84ffd4512ec9c2b201166b9a75a8bc32bb6b142f04da083b453","ssdeep":"6144:4iFze4lEHxdMOg3LDUvApASTbqn6qLd8zA2o76:Xz2xdMnOVd8zP","tlshash":"b87419cdb3d674669393a478503f018bb23a7892f84cc899f185c8e42e7469a4277f7d","first_seen":"2026-04-26T15:35:55.617007Z","last_seen":"2026-04-26T15:35:55.617007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-H70E6H8WMK\u0026cx=c\u0026gtm=4e64m2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:37.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-H70E6H8WMK\u0026cx=c\u0026gtm=4e64m2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Apr 2026 15:35:37 GMT\r\nexpires: Sun, 26 Apr 2026 15:35:37 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 148010\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":437228,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7828)","md5":"1f8ab97ebc78cec879a3048b7e458bd8","sha1":"a4a9bc893c0376b596c79959655f74088ae37c2a","sha256":"4df136984b0b15b13b19662ba419ca043d98932d08eaaf886857ab95f09fe7f9","sha512":"f5a9db0b4432fe757a62637bd768beef490548477516b7c348eca572d2ff8a7625be4f1637e701314c5c6329bfda2908a7d79ef02aa78184e0ee322dce6864f7","ssdeep":"6144:sziFze4lE4kYd2OgDoIIDUZApASTbqMucNjbGJb:7zZkYd2zoIKS","tlshash":"7d9408ceb3d674665396f478903f018ba57b28a2b44cc89af189cce42d7069a4177f7c","first_seen":"2026-04-26T15:35:55.617749Z","last_seen":"2026-04-26T15:35:55.617749Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/non-embedded.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/BetWinner/non-embedded.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:53 GMT\r\netag: W/\"03bfd404aedaaa744bda3e5b186a43db\"\r\nx-amz-meta-mtime: 1776840779.715190241\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 19:13:09 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 73098\r\ncache: HIT\r\nx-cached-since: 2026-04-25T19:17:07+00:00\r\ntraceparent: 00-41936a7b8856637c371660405035a4ac-09042edad9bebba3-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35002,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (35001)","md5":"03bfd404aedaaa744bda3e5b186a43db","sha1":"ecb39c6fe35e96b364e60dbb252d7dc10b80784b","sha256":"5b16f2191f8ec6ada107664d08dcf2971b0ce55de16813dca484f18576b10bb7","sha512":"d3eee8e1eb1f1275b8e83f7b9d383129bb2af12181e4894792312dc186b12477925af2e53539f170ec2a0ea1b98473aa39d45c2953cd414567eda3fffb858bb6","ssdeep":"384:Nm2Ixar8n5rz0f0uL/FrLrw+++Tj1jRpO54FZsa6XvKc:Q2xqgHc+++rpOOAic","tlshash":"28f27316da401667f9278a2a29d8fb0c75e8e107ed730e2df019d1188fd7f9f1aa0794","first_seen":"2026-04-09T20:38:49.80371Z","last_seen":"2026-08-17T05:35:36.740767Z","times_seen":1521,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":43,"dns":0,"connect":11,"send":0,"wait":9,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/RobotoVariable/RobotoVariable.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/RobotoVariable/RobotoVariable.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 147664\r\nlast-modified: Mon, 02 Mar 2026 14:14:17 GMT\r\netag: \"41b28e1bd72ac670c2ee83ad0ea538da\"\r\nexpires: Thu, 09 Apr 2026 10:20:13 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 172\r\ncache: HIT\r\nx-cached-since: 2026-04-26T15:32:33+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-443927c81b3ae6db0bd2b7266d297638-1213693ff1fdc301-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":147664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147664, version 3.983","md5":"41b28e1bd72ac670c2ee83ad0ea538da","sha1":"c1292620ead9a033a7b327322216949db358ada0","sha256":"a54eb5cfffedfd09c478b7d8d991e6b353fd1972706a2b91e7176b79e03c415d","sha512":"868f9f44cf7666b07b637b8b0afe2031530db26a4b0748d5dfacdcef0ea34bffd0da482986c2f91e85a7d0fa3bbf674b874d822b4a87e343ba121a45000f3cc6","ssdeep":"3072:NQFAi+ZiSPWfR5V/J9EbkjFL8BQJdj6mSUYlmLerzCSIfz4EVTS:q1CPWbV/Egx8BqdsJlmSrzmzjVe","tlshash":"1ee313c6a0e2d9c856761ffda1152ea248dd3a28de0f6f66344331345ffaea4107dc26","first_seen":"2026-04-09T09:37:58.836007Z","last_seen":"2026-08-17T05:35:36.71013Z","times_seen":1624,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/en/block","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-26T15:35:24.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:24 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2836\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.118, dt_total;dur=0.010, total;dur=3;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 29 Apr 2026 15:35:24 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 495, 495\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1303)","md5":"b4d2383e8f15e6c2759383c94c8845a8","sha1":"db9df5120b7c99f31d210cb05e0fb7df110d9266","sha256":"a2f9e1da31d967c8a4f362fae1c56ffffafc5ae16573b711cfb99a885c6bb3ed","sha512":"da6f375f363626a03c67e4b79120f2c9ee65ff687eb6270c5e60cd0d5b3bb1d5c6778d5aa624a69882bfebaf5caca86ae6cddd5955572ebf5845be631052ff25","ssdeep":"","tlshash":"2f51972b5a28ce3f05205458d623e39be5cc31b7714ba458c0b84d196b4e7d3ad5f8e5","first_seen":"2026-04-26T13:29:20.558947Z","last_seen":"2026-04-26T20:32:08.867823Z","times_seen":4,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/591c2f5a23.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/BetWinner/591c2f5a23.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"7690fc9f03c7dedfb83c52b6d6a5fe75\"\r\nx-amz-meta-mtime: 1776840779.71119015\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:14:53 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 28264\r\ncache: HIT\r\nx-cached-since: 2026-04-26T07:44:21+00:00\r\ntraceparent: 00-8e42f53289e9cbfe96779a9b8c95d9ae-e4b1c670e3e59fae-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3879,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3354)","md5":"7690fc9f03c7dedfb83c52b6d6a5fe75","sha1":"4492ee79afcff94e32fa4303ba33c2a9a3e9b7b1","sha256":"6eaa7dd1270fe349d56b8766c23094438fc69b585e6c3e6bc2561246322a0fb4","sha512":"fbf8d4447e97fc5aee951b12b53dc2f41ba3f85cd2637c1ef802a44f879fd14469c9237f50225fe4df64a2cc8dcf99a52820dcf083bb7d5d50a99ea9d96122af","ssdeep":"","tlshash":"1581c85e1ef874b8211d0faf6f5338e40aa48c12e39c9477ea460f390339055e6399b7","first_seen":"2026-04-23T19:54:27.690126Z","last_seen":"2026-04-26T22:21:48.14523Z","times_seen":8,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/analytics-module-api/v1/analytics?projectId=495\u0026domain=betwinner-13111.pro","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"GET /analytics-module-api/v1/analytics?projectId=495\u0026domain=betwinner-13111.pro HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==; lng=en; cookies_agree_type=3; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 155\r\nx-request-id: d924ac4334329e14da5f9d2c6e22f559\r\nx-request-guid: d924ac4334329e14da5f9d2c6e22f559\r\nx-server-name: Analytics\r\ncache-control: public, max-age=300, stale-while-revalidate=60\r\nx-time-ng: 0.018\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=0, wf-uht;dur=0.025\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":155,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8288b3617f76e0f8cdd50a90e1aa6cc4","sha1":"a9a1950ab3d0dd719da3e028a4b1e7dc978447a0","sha256":"0983380b5b692a735893f10d4cc7ff6d03601b5c288a45ab032776c8929a921c","sha512":"69d48e9375ac8b3ff15bcf56f79f38ee7817817941b5145d11471b19e6cb7d781724024fce85fac4eed635ae45e77fcfd10fb219455304880180bf6febc6ef8f","ssdeep":"","tlshash":"adc08c12a04b96ac9843a1d0a08e5f2aa38d60334eb348d60a129330c1becb82000f1b","first_seen":"2026-04-04T23:30:58.738135Z","last_seen":"2026-07-14T11:27:17.710056Z","times_seen":20,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 19\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"{\"w\":55,\"state\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 495\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.014, wf-uht;dur=0.014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-17T17:43:25.408974Z","times_seen":317822,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/86509141a3.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/BetWinner/86509141a3.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 506\r\nlast-modified: Wed, 22 Apr 2026 06:53:53 GMT\r\netag: \"75157874f1812b1a85d5d7c78bb43035\"\r\nx-amz-meta-mtime: 1776840779.712190172\r\nexpires: Thu, 23 Apr 2026 13:29:57 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 6399\r\ncache: HIT\r\nx-cached-since: 2026-04-26T13:48:47+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-17ab22c65b0d52d76353cb0a42693200-dcae5654f7c6ddf0-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":506,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (506), with no line terminators","md5":"75157874f1812b1a85d5d7c78bb43035","sha1":"bfe6f02506e791a7ac46a7bddf6ee3ccb340be15","sha256":"1f4762c043d75946f9d3066ba8dff14622516b24145b3ef6b4049d30ceb629f2","sha512":"565d1e650c9a0147a050a73f0db118e839912e67f431ca7c549930e4b6aa84ff249bd07ad97d783a7080e27065bdee079465875ba816cf922f15e94c1a99414b","ssdeep":"","tlshash":"70f0e92a3eadf2d8147b82801e904bca4057f20ac10a68dcb823d2549d4b6179fa446e","first_seen":"2026-04-09T18:37:42.867807Z","last_seen":"2026-08-08T12:13:41.298919Z","times_seen":417,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/4aafa3c312.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/BetWinner/4aafa3c312.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:53 GMT\r\netag: W/\"53077468a10951cf995f7719a555f1be\"\r\nx-amz-meta-mtime: 1776840779.710190127\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 13:56:42 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc20\r\nage: 5373\r\ncache: HIT\r\nx-cached-since: 2026-04-26T14:05:53+00:00\r\ntraceparent: 00-00b8bab1563c132960bad350179b912b-1c105b2a6b754b78-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3994,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3994), with no line terminators","md5":"53077468a10951cf995f7719a555f1be","sha1":"8c4467476b31f0ab221aaa37df579ee68339afbd","sha256":"381b21eac86b13e291fb8aeb15803e5cabb1340a6dd9e385addaaff85432b64c","sha512":"2d044da0d6ea8871ea8a6682d5593f30d9295a10919a2ddbc3d7418adc37ea1b2439d0f9796a4ce5e194c0b5fa00cadfe5c1534e0afb002f70e2d67d620dd816","ssdeep":"","tlshash":"8481a9bebcb898320537e021a6596e7d0a71f51bd6200f85e00d93681cc36d36df2da8","first_seen":"2026-04-22T00:53:54.245766Z","last_seen":"2026-06-25T05:48:36.640279Z","times_seen":1117,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-icons/1.0.1010/495/common.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-icons/1.0.1010/495/common.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Apr 2026 11:41:41 GMT\r\netag: W/\"5597ad38bf020fadf795cbf8a1aba9bf\"\r\nx-amz-meta-mtime: 1777030885.837879639\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Apr 2026 11:47:59 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 12632\r\ncache: HIT\r\nx-cached-since: 2026-04-26T12:04:54+00:00\r\ntraceparent: 00-c42408703172e0541a490b100a7f9b22-572666c61c415ba0-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223065,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5597ad38bf020fadf795cbf8a1aba9bf","sha1":"08c391aa1ec1fb969dfc95a16cfc23a1a1e2bf48","sha256":"41549bf76490dc18e782969c8fb42f9c987c84609448094a3b6d729a09948e2d","sha512":"82712ccdc362578341f86f47fe6f19365e2d16b642c7a81093cf7393e41ef22d1e7285afcdaff4f21ce30585c78ae87aa8b0f26bef3449ae9d951920c1c3d0b7","ssdeep":"3072:ylP1Zo5fsKu+JrHqgU80svP+IvHDdNtr8bemj1jVd9qHMLJDxo7fck/E:ycsvO7++1N+VdvKcwE","tlshash":"2b2485799658e35c1883e6bddf7fd0a0230f90bab1eac2a42ddec7b4514b4c4e697850","first_seen":"2026-04-25T09:12:57.390063Z","last_seen":"2026-04-26T22:21:48.141411Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adscool.net/pageview/betwinner?usr=v0.1%3A19117089420%3A1777217736998%3A1777217736998\u0026scr=1280x1024%7C1280x1024\u0026scv=1280x1024%7C0\u0026pgh=betwinner-13111.pro\u0026pgl=https%3A%2F%2Fbetwinner-13111.pro%2Fen%2Fblock\u0026pgr=","fqdn":"adscool.net","domain":"adscool.net","tld":"net"},"ip":{"addr":"172.67.175.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:37.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adscool.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 20:05:09 GMT","end":"Sun, 28 Jun 2026 21:03:42 GMT"},"fingerprint":{"sha1":"85:EF:59:97:17:59:49:82:25:5B:6B:F5:A1:7B:25:D4:89:8A:C2:68","sha256":"C0:49:DD:50:E7:D2:90:D7:7C:55:93:5C:5E:B0:72:D0:F9:AF:19:CA:D6:96:CD:D6:99:E4:85:60:D3:82:33:1C"}}},"request":{"raw":"GET /pageview/betwinner?usr=v0.1%3A19117089420%3A1777217736998%3A1777217736998\u0026scr=1280x1024%7C1280x1024\u0026scv=1280x1024%7C0\u0026pgh=betwinner-13111.pro\u0026pgl=https%3A%2F%2Fbetwinner-13111.pro%2Fen%2Fblock\u0026pgr= HTTP/1.1\r\nHost: adscool.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding,Accept\r\nstatus: 200 OK\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nx-request-id: f58ccc91-2c52-412f-bb54-d698a37f62fe\r\nx-download-options: noopen\r\nx-runtime: 0.003966\r\nx-content-type-options: nosniff\r\ndate: Sun, 26 Apr 2026 15:35:37 GMT\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yh679ShRC%2BteKblDL%2BVTkh0ALu8%2FAtOQhMgqCE9Dz18IShESCfRWQgfkH8%2BCklVHwWedfOG%2Fc5bmgQ1oM88%2BLpDnvk%2FoAhhWhGu8YRxgju0FppdOAIGMS72rcvYkBg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f26a8885e242678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T17:43:01.324879Z","times_seen":17940036,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-26T15:35:24.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:24 GMT\r\ncontent-length: 0\r\nlocation: /en/block\r\nset-cookie: platform_type=desktop; Path=/; Expires=Wed, 29 Apr 2026 15:35:24 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 29 Apr 2026 15:35:24 GMT; Secure\nauid=ua+mCmnuMLwkX3E3A/U8Ag==; path=/; secure; httponly; samesite=lax\r\nx-dt: 495\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.015, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T17:43:01.324879Z","times_seen":17940036,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":101,"dns":2,"connect":31,"send":0,"wait":42,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/0ed4795fbe.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/BetWinner/0ed4795fbe.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"814b68a553b9ad785c14d9dae52f1a6d\"\r\nx-amz-meta-mtime: 1776840779.708190081\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:21:41 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 28249\r\ncache: HIT\r\nx-cached-since: 2026-04-26T07:44:37+00:00\r\ntraceparent: 00-82e325f5ad9018204875e8c7fa7654d9-fd407a43a1fe4bd1-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1234,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1144)","md5":"814b68a553b9ad785c14d9dae52f1a6d","sha1":"44db29d19d8e0cf36be1a8b91e31d1d4bd037931","sha256":"1ea85f5f01c5b3b966c6e7738f69622df177bb073efad7bb88b8376c96cdc2b4","sha512":"91d266d40c634c41ebea1c969c99e4387bfb6318253850f691b09c089d5f0564efd8c14545476963f6f9c19e72e6a40054d9f91398e419014859e89d676c376e","ssdeep":"","tlshash":"602171be6db0e034a7502eee3c24253243c83993914ba4976acc43d803970284e38fbb","first_seen":"2026-04-23T19:54:27.70169Z","last_seen":"2026-04-26T22:21:48.144634Z","times_seen":8,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 72\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1280; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":72,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":1193,\"m\":{\"i1\":137,\"s1\":\"en\"},\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 495\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.089, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e16c0b9ecb6d887603178fe5ae8ff7bf","sha1":"45dc6b8c75023b304b017980b77a6f2299811c85","sha256":"1c06e8a27e4478a6c2272ae1e57e96bc6e413e342bd7f2c107b22ce6fd47fc1a","sha512":"98683ca298d90af92da345445e5c9dbd25ed7351cf7f36e89d9d665bd6eed2a94cf510afdd36f58c2545f20ae69a57eae078d999d78f28fbbf8adbf226882010","ssdeep":"","tlshash":"867000008280880000a028008a08080203a28a8a08c00aa028a3080a8080ae082aa23e","first_seen":"2026-04-26T15:35:55.630801Z","last_seen":"2026-04-26T15:35:55.630801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-S6SBTBM9JC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:36.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-S6SBTBM9JC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Apr 2026 15:35:36 GMT\r\nexpires: Sun, 26 Apr 2026 15:35:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176688\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":543153,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"85ab3ea2376007240271f82f5ff46f97","sha1":"0c5745bae97e5b0c70cf8e5a9d27ac7d2f226199","sha256":"49d32173fbbe3f166f59a72283f76ce480d07edc353a80ef69bf8bdbe73f57cb","sha512":"9d9d8adf0b5513aae387daebc9b4b44b318ed946ed35d5c45ce459d81c16b805308f883df3b7a2c61ac039185ba4b3d14ee351f72ab7758815b55101aa1bc203","ssdeep":"6144:hkiiFze4lE4kYd2OguHKyoAqDUZApASTbqVw43d+h7j:hWzZkYd2dyoAVE","tlshash":"49c409ceb3d674625296f478903f01cba97b24a2b45cc8abb189ccf02d3465a5177f78","first_seen":"2026-04-26T15:35:55.631735Z","last_seen":"2026-04-26T15:35:55.631735Z","times_seen":1,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":115,"dns":0,"connect":21,"send":0,"wait":46,"receive":68,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5JZK2JQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:36.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtm.js?id=GTM-5JZK2JQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Apr 2026 15:35:36 GMT\r\nexpires: Sun, 26 Apr 2026 15:35:36 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 26 Apr 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 115514\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":335964,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4971)","md5":"30a9f7e573152a104d19966b85311f79","sha1":"8a4f58bf32efe4d81defc0521bdd4fbe11234490","sha256":"e30b025ce8ecb65e5946d0fbbfabb93e7fe16ff6207353a1489d0d398579cbe9","sha512":"79ccc762ed0cff375420f34cfee3548ec0e157f879f94f6203765f39e7b6b314681df524630839b2b7c9803f49d2541add417db7f1af7feed3be91b09de2c350","ssdeep":"3072:XiBCNWHzdkfuzVo4lEHadeB0RjaMbBaAyCQsVjgzLLA6UeCnwvpASTbquC2VqNGs:TiFze4lEHad2Og3LDUZApASTbqj2V5wx","tlshash":"ac6419cdb3d6746283a3a478903f114bb23a7892f84cc899f185d8d42e74a695277f7c","first_seen":"2026-04-26T13:29:20.496409Z","last_seen":"2026-04-26T20:32:09.018664Z","times_seen":3,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":188,"dns":3,"connect":7,"send":0,"wait":32,"receive":22,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-H70E6H8WMK\u0026gtm=45je64m2v9133906937za20gzd878233633\u0026_p=1777217736267\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAIAGA\u0026cid=1048452267.1777217737\u0026frm=0\u0026pscdl=noapi\u0026rcb=5\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115938465~115938469~117266401~117512543~118167058\u0026sid=1777217737\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fbetwinner-13111.pro%2Fen%2Fblock\u0026dt=BetWinner\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026tfd=12480","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:37.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-H70E6H8WMK\u0026gtm=45je64m2v9133906937za20gzd878233633\u0026_p=1777217736267\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAIAGA\u0026cid=1048452267.1777217737\u0026frm=0\u0026pscdl=noapi\u0026rcb=5\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115938465~115938469~117266401~117512543~118167058\u0026sid=1777217737\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fbetwinner-13111.pro%2Fen%2Fblock\u0026dt=BetWinner\u0026en=page_view\u0026_fv=1\u0026_ss=1\u0026tfd=12480 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://betwinner-13111.pro\r\ndate: Sun, 26 Apr 2026 15:35:37 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T17:43:01.324879Z","times_seen":17940036,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":66,"dns":0,"connect":23,"send":0,"wait":30,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-H70E6H8WMK\u0026cid=1048452267.1777217737\u0026gtm=45je64m2v9133906937za20gzd878233633\u0026rcb=5\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938465~115938469~117266401~117512543~118167058\u0026z=102466125","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"216.58.201.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:37.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:38:39 GMT","end":"Mon, 22 Jun 2026 08:38:38 GMT"},"fingerprint":{"sha1":"28:27:63:E6:8D:9F:5E:83:2F:93:1D:17:8F:A5:D2:B4:07:94:69:56","sha256":"86:54:70:19:0A:EA:E1:98:29:B7:6F:10:12:6D:C3:A7:B8:98:D6:2B:0A:87:0F:67:18:D0:50:E3:8A:88:B0:BF"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-H70E6H8WMK\u0026cid=1048452267.1777217737\u0026gtm=45je64m2v9133906937za20gzd878233633\u0026rcb=5\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938465~115938469~117266401~117512543~118167058\u0026z=102466125 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 26 Apr 2026 15:35:37 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-17T17:43:07.805711Z","times_seen":1034574,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":101,"dns":0,"connect":21,"send":0,"wait":37,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\nlast-modified: Fri, 24 Apr 2026 13:27:22 GMT\r\netag: \"ab34908b1d79d387aac283295dac110a\"\r\nx-amz-meta-mtime: 1777037172.768269991\r\nexpires: Fri, 24 Apr 2026 13:30:48 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 26\r\ncache: HIT\r\nx-cached-since: 2026-04-26T15:34:59+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-78a4bff2227a6400c48e910b2c3e434a-11a5b2ed7ea197a2-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"ab34908b1d79d387aac283295dac110a","sha1":"52b81d3086150ecdc019fc76ca81ad528af6d7ac","sha256":"5eace19047fd9eadc721c4e818de56a07891e0bf14142b3a7bd465b573db990c","sha512":"b6069c395ba0657419f243f2dfe2448cc7184a79525e1426c6d7c6e07e6a12e1ce3741de82cfbf98a5642133754b8b6db4c0dcc90b88a142aee0d402fa1d1afe","ssdeep":"","tlshash":"ab5000000cc000000300c0300c0c0000c00c00f00c0000000c0c000f00c00000000300","first_seen":"2026-03-18T06:25:42.866074Z","last_seen":"2026-08-14T06:12:15.969364Z","times_seen":1930,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_25447bf1bd.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_25447bf1bd.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 14:13:32 GMT\r\netag: W/\"5b12ebbf733049a056826174dec7d075\"\r\nx-amz-meta-mtime: 1777039813.962034813\r\ncontent-encoding: gzip\r\nexpires: Sun, 26 Apr 2026 13:24:40 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.004\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 7836\r\ncache: HIT\r\nx-cached-since: 2026-04-26T13:24:49+00:00\r\ntraceparent: 00-a97fdefc647efa5b9ca2c65b254174d7-eabe106703dc0532-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1743226,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24159)","md5":"2f107adf701a22aa9c81ea2bdc748647","sha1":"61d77506dd10b3f7130a3feaa1b6eb307029d274","sha256":"f1a7d32fc8ba5fb7230f795b68357cddb5638bdd7482fd7107977c1488e9884b","sha512":"32deeb4e8fc08bc48d70161b47b72ad033baed19375bf0db07929df7496aae05eaff9145dfb17fe7d91e0a086afb69770d475ec8e6f3f95a6f4e9ade91a51716","ssdeep":"24576:1Q/A3yfrJ5djkG1vkEjBOrXg2O2qkOmd0nLQ:1Q/A3ErJ5NkG1vkEjBOrXg2O2qkOmdUQ","tlshash":"12258e61f281bd2f2adb6bd750230046a2ed1d6dc428f490f5d7dde93ace850916eb2c","first_seen":"2026-04-22T09:07:22.380707Z","last_seen":"2026-04-29T10:46:14.597108Z","times_seen":153,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/152-495/desktop/media_asset/421eba1f1fa0634ebb20dc72ea237ce0.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/152-495/desktop/media_asset/421eba1f1fa0634ebb20dc72ea237ce0.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 02 Mar 2026 10:48:37 GMT\r\netag: W/\"96e578894f824d1097dd20dbfd34ac4c\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:39:58 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc22\r\nage: 303\r\ncache: HIT\r\nx-cached-since: 2026-04-26T15:30:22+00:00\r\ntraceparent: 00-c4067ba8119815a110b8087fe4c1781e-b9c6955904684d7a-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":11243,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"96e578894f824d1097dd20dbfd34ac4c","sha1":"ded337f251847822550a9708d5902af550b18c3d","sha256":"0de652e74127311ed17adb94783a3d9a89d56a533fe599be6d575ef04b6a55ad","sha512":"ad6c3f692a6c6cf05fc9f3762709fe632304b008bcfbc97feca0afb48a25bbd39c461846a69ae3a13693179e0cedfced6daaf66d6d695083fdd8ab4a50e19b72","ssdeep":"96:7VqvTcZl2MWzC5f3Mit3/tJJBMTCSMRyfiNWIz0ubdx:wvTjgXEUyfiNWIzrj","tlshash":"e632f7d9baf55c33021634fce5fbb91be3d81f9b8d4ea8647a5c3c081f6011114aaa79","first_seen":"2026-04-04T23:30:58.718256Z","last_seen":"2026-07-14T11:27:17.690377Z","times_seen":24,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 98\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":98,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":11054,\"m\":{\"s1\":\"7acdce37-229b-41e8-b00f-b188d2c1e9d1\"},\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 495\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.129, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e18c00ddfea23cd47f23a884d251befc","sha1":"9ea660a7b76be5d677a6fa621e3255222be65790","sha256":"1650233eaec0a9aadf71a98171e8e43acbd2263ca122303ee084d20b96bed4f5","sha512":"a7d5a95999d4a1d5add2f4f24764927f74d54b26afa252e1275ea6435f9fcdc999f3e280c545e0c7c0c9b87c9939f15d002e8cb92dc948c1dd23655b8cf71d9a","ssdeep":"","tlshash":"3370000002e00000008020088a08082002228e8200c800e228a3080a02a0aa0a02ae22","first_seen":"2026-04-26T15:35:55.635071Z","last_seen":"2026-04-26T15:35:55.635071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 48\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":10273,\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 495\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.096, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8fdbac6fc31211413825b47f931f61a0","sha1":"d9c29150a428baf3e575a42d83e880fae7eb506e","sha256":"a11c6c848ec74d91f85dd09bb379f7bf0e878dde16d9a196adbc4e65f6d151e5","sha512":"40e3623ce945a6350c3efc952ff263b421777534e950a1fcfa3b3de3b2df543493f910d1aa2101fe187e1d7015d329a44ff5b720335a32bd944d098e215471bc","ssdeep":"","tlshash":"c370002803802000008830802bc80e20022baa0200c800a0a0eb080a82808a0a22aa22","first_seen":"2026-04-26T15:35:55.636004Z","last_seen":"2026-04-26T15:35:55.636004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/75c180abd3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/BetWinner/75c180abd3.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"107150ebe5913feb7ade00b3b7bb73ea\"\r\nx-amz-meta-mtime: 1776840779.71119015\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:14:54 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 27468\r\ncache: HIT\r\nx-cached-since: 2026-04-26T07:57:38+00:00\r\ntraceparent: 00-854b423e3bb0800fd768a2184766e2b0-4bd9cfc2f45547aa-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":9107,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8867)","md5":"107150ebe5913feb7ade00b3b7bb73ea","sha1":"909c35d08f5b997b76d0a6e94bc900b9d0233b5f","sha256":"9e5e5694a44a19ce4b4d1ecd2c673aefe0e3d8f22188f14d4c40a2c642eaf2da","sha512":"92053d37c4a8e85a7384143a04bd37dec329052ab967faaf7e4906dd78b2de06626b87ae0915ee6d23a8dd59efdeac9a1c4e370639a437c665d01f9c3a9de341","ssdeep":"192:FhMoQfDblu7WteFsNyRTF5Lk55h/WX57Xh3PfuMuvzXeuv5xOzHl0Ue/jud:HxQrblu7WteFsoRJFQH/WX5XhfWn7uuS","tlshash":"a612c9d82df860779b638399bc2290b19b0a4a54a10d44dbf5f84f1c059e4cd9ebbb73","first_seen":"2026-04-23T19:54:27.708063Z","last_seen":"2026-04-26T22:21:48.140374Z","times_seen":8,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 54\r\nlast-modified: Thu, 26 Mar 2026 13:23:36 GMT\r\netag: \"06c9b68c4f5819c83cc220a9024bbee1\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 26 Mar 2026 15:16:20 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc10\r\nage: 2951\r\ncache: HIT\r\nx-cached-since: 2026-04-26T14:46:15+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-db26ad0ee168d0c90290fcd20d9fa04c-5eeb3f325c3d794b-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":54,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"06c9b68c4f5819c83cc220a9024bbee1","sha1":"72061d9a7ff428838a3ffbeea37f5b239685d24d","sha256":"b78dcd52b6ad0b04c4e35350f6bfc45cdf407c55b71f49ac5e201bb403213450","sha512":"f75445453afaa7b628853122e9ca4dd668545de13331ee0d3b10d1f59429293f7a324464bfbae5eb4bc31a25968d4c0142fad5f42dd0d1053e27f5762e72629a","ssdeep":"","tlshash":"76900299a50822502669c666519d48d12184125b4511369ce5527911f446c819950689","first_seen":"2026-03-26T08:31:53.670846Z","last_seen":"2026-08-17T05:35:36.837396Z","times_seen":1925,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:36.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_f978b4369d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 389\r\nlast-modified: Fri, 24 Apr 2026 14:13:32 GMT\r\netag: \"3a4af5789426796fafd3970de96371be\"\r\nx-amz-meta-mtime: 1777039813.965035064\r\nexpires: Sun, 26 Apr 2026 10:50:41 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 17069\r\ncache: HIT\r\nx-cached-since: 2026-04-26T10:51:07+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-4e1099606d68adb3d1833e4621db1ddb-061364f882fc4573-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (388)","md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-07-24T08:16:23.48126Z","times_seen":1789,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/BetWinner/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 57\r\nlast-modified: Wed, 22 Apr 2026 06:53:53 GMT\r\netag: \"0f52fc8c693ecafc1d77320a696ce65b\"\r\nx-amz-meta-mtime: 1776840779.704189989\r\nexpires: Thu, 23 Apr 2026 17:56:35 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 77518\r\ncache: HIT\r\nx-cached-since: 2026-04-25T18:03:27+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-90b32368a650573e48ee0fc3b446f95b-972ec9f8e6695312-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-19T09:54:34.316022Z","times_seen":1235,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/152-495/desktop/media_asset/2b562ece061efb588334036be6d089e1.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/152-495/desktop/media_asset/2b562ece061efb588334036be6d089e1.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json\r\nlast-modified: Sun, 11 Jan 2026 03:45:39 GMT\r\netag: W/\"f986d438bf0bd79d10adc82ea8e21f18\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:39:47 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc22\r\nage: 2794\r\ncache: HIT\r\nx-cached-since: 2026-04-26T14:48:52+00:00\r\ntraceparent: 00-d1db64b1f7555c4f613970ef5ee9f299-c66d30ce5b40b2bb-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2262,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f986d438bf0bd79d10adc82ea8e21f18","sha1":"81c8a521aea2811eb22863c04ee159eda02b7997","sha256":"e5ce2968eec32d10b3035315de737e8f297de504ff991bcaef58e14fbffe0ce1","sha512":"dd25afddd07deccc9b67654127d7bed9bbedb3227b401d0925c60392aae7c8d3d7b379dbc79b325fb931d915e54fe047cbe95dc7c026746dc39a32a85cd41929","ssdeep":"","tlshash":"fe41279ef3e41db3004a65bcd4f7ba2993d41f5f689a6c38799d2c0e1bd4011409a97d","first_seen":"2026-04-04T23:30:58.740325Z","last_seen":"2026-05-31T13:33:10.655113Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/152-495/desktop/media_asset/54f82e5e958e57c7f164bdd85c602a70.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/152-495/desktop/media_asset/54f82e5e958e57c7f164bdd85c602a70.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betwinner-13111.pro/\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 11 Mar 2026 14:52:38 GMT\r\netag: W/\"cd7a9db3822a8a4ef2532baa42e31104\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:44:32 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.044\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 2826\r\ncache: HIT\r\nx-cached-since: 2026-04-26T14:48:20+00:00\r\ntraceparent: 00-3e27761c057fe44c6652431a5d63c30d-06fab5c81fcc99aa-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2097,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cd7a9db3822a8a4ef2532baa42e31104","sha1":"c0af4429c0049582ea82c6046ee3806ddfdff481","sha256":"90e9b6cb4ce49841cf85fd387918c84426ae957287fd4b17433a830254325a73","sha512":"326b1bf65540e8a59e59eae5894fb047a03043fe0465f5960d905914f9eb93cc4e1af7faa981a2e291ab68bd999f2fc1a5e92b31fd360620ef1447189a4c49c9","ssdeep":"","tlshash":"b641b698f7f06cf3301b90f8a9b7aa4997c40f1ba8556da4ba9c745c2b1441a0037d3e","first_seen":"2026-04-01T08:46:29.746573Z","last_seen":"2026-07-26T07:36:09.556267Z","times_seen":451,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-icons/1.0.1010/495/country.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:26.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-icons/1.0.1010/495/country.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Apr 2026 11:41:41 GMT\r\netag: W/\"e755054847ccc09de8ac9bdf2c4326d6\"\r\nx-amz-meta-mtime: 1777030885.837879639\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Apr 2026 11:48:10 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 12632\r\ncache: HIT\r\nx-cached-since: 2026-04-26T12:04:54+00:00\r\ntraceparent: 00-de4fd46dff4bf3eef9a7a5767c5eb35d-8d2706258655087d-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e755054847ccc09de8ac9bdf2c4326d6","sha1":"1461e05caf5c7bfda69a9a45127a8f78dc37a9ec","sha256":"d03bc4c7e0d2d128ba647df7ef393f9e856ff0b98b09d6d2849bdaaaded8e7b9","sha512":"2a6e1617fe4b5f4039431564fdb2d90f8a4a930ea555e10133b9d07809ebe56f64cfc9000de709289b2cb9143664bb8e334cabf2d49c7c20dac9ba8ed0eee9ce","ssdeep":"3072:hgvO+igz5Wy8EjUskAnA3ZJ9QeVCLpE74OWuhgwlKqjk71xhbXVjGYLGS/suV1SM:uqCLpPOWuq5vaSueoO7","tlshash":"08245554b099b14c2a8363e8c7afa5e1133e61db71da419938e993d8520e3dffe83950","first_seen":"2025-08-28T01:30:48.467208Z","last_seen":"2026-05-07T11:42:09.284783Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betwinner-13111.pro/favicon.ico","fqdn":"betwinner-13111.pro","domain":"betwinner-13111.pro","tld":"pro"},"ip":{"addr":"185.175.166.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betwinner-13111.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 05:18:04 GMT","end":"Wed, 22 Jul 2026 05:18:03 GMT"},"fingerprint":{"sha1":"F6:94:A6:68:D0:84:49:1E:C8:D6:56:F5:52:A9:1A:5A:C0:7B:2E:68","sha256":"2B:CE:DC:C8:0B:13:93:2A:0E:56:AB:A9:54:2A:1A:F2:0A:55:DE:80:31:73:7F:AC:F9:94:EB:DB:5E:08:9E:EF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: betwinner-13111.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/en/block\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mCmnuMLwkX3E3A/U8Ag==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-length: 0\r\nlocation: /en/block\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 29 Apr 2026 15:35:25 GMT; Secure\r\nx-dt: 495\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.004, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T17:43:01.324879Z","times_seen":17940036,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/BetWinner/entry-c46e5ca2f5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betwinner-13111.pro/en/block","date":"2026-04-26T15:35:25.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/BetWinner/entry-c46e5ca2f5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betwinner-13111.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betwinner-13111.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Apr 2026 15:35:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"5f69df9fcaffa0a46715fed95f6a382f\"\r\nx-amz-meta-mtime: 1776840779.714190218\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:14:53 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 28265\r\ncache: HIT\r\nx-cached-since: 2026-04-26T07:44:20+00:00\r\ntraceparent: 00-627032833f0461b760e0485430ee53a1-fe323d1f6bb73356-01\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc21.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":20325,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19897)","md5":"76fe338a95264236ac3cab73eed27c00","sha1":"726aa478a5a443009a0261a3aa715e1781f6fdff","sha256":"c988bb1d8ba2c216457c58076526c9ac0ccb537f74c702b9b8a7c959f33f5c2c","sha512":"40c9d0322b3036432b994fe62b3f714e78d289fa0b5dad16702cc0fede0d860bf2ec6993953d7108dfc6ca2b4cd635951c8cae932b9880c1e33aebcd6ff43ca0","ssdeep":"384:Hv3EwUMs5dKo0CzA4e/y/Vr4LcD7KbnwcjQ/lT+oUE0z3aMpGLV6hcYIgRCs:Hfxo0CzA4eYVr4LcD7KbnwcE/d+oUdzF","tlshash":"7c921078219cf0b930cb449537f6bc9266886d5ff98afcc64187c9dc03da14cc9267aa","first_seen":"2026-04-23T19:54:27.705073Z","last_seen":"2026-04-26T22:21:48.157386Z","times_seen":8,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}