{"report_id":"fa5801eb-ebf2-40b9-b4d1-06399a575fbb","version":6,"status":"done","tags":[],"date":"2026-02-27T18:19:28Z","url":{"schema":"http","addr":"betlucro.fun","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"172.67.183.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"title":"BET LUCRO","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"betlucro.fun","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"172.67.183.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T18:19:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-27T18:19:03Z","timestamp":1772216343,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49300,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-27T18:19:03.179374+0000\",\"flow_id\":1264708419546925,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.48\",\"src_port\":49300,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3437,\"start\":\"2026-02-27T18:19:03.159533+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-27T18:19:03Z","timestamp":1772216343,"ip_dst":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":45878,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-27T18:19:03.474906+0000\",\"flow_id\":1784554081183011,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.48\",\"src_port\":45878,\"dest_ip\":\"104.237.62.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api64.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-02-27T18:19:03.156963+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-22T23:25:47.841062Z","alert_count":0,"request_count":2,"received_data":785660,"sent_data":776,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-23T04:50:45.056452Z","alert_count":0,"request_count":2,"received_data":815947,"sent_data":752,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"imagedelivery.net","ip":{"addr":"104.18.2.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-09","domain_rank":15876,"first_seen":"2021-09-20T12:34:55Z","last_seen":"2026-02-25T18:26:13.057292Z","alert_count":0,"request_count":1,"received_data":64140,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"betlucro.fun","ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-27T18:19:30.355369Z","last_seen":"2026-02-27T18:19:30.355369Z","alert_count":0,"request_count":19,"received_data":4334185,"sent_data":9714,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"api64.ipify.org","ip":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"domain_registered":"2014-01-05","domain_rank":26688,"first_seen":"2020-08-17T05:58:17Z","last_seen":"2026-02-25T20:53:45.34837Z","alert_count":0,"request_count":1,"received_data":208,"sent_data":407,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api6.ipify.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":226847,"first_seen":"2019-05-13T11:53:14Z","last_seen":"2026-02-27T16:11:48.515479Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1218,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-02-23T08:58:07.99797Z","alert_count":0,"request_count":3,"received_data":813,"sent_data":1215,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.utdstc.com","ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-10-18","domain_rank":661585,"first_seen":"2014-02-12T20:21:29Z","last_seen":"2026-02-15T08:21:49.805814Z","alert_count":0,"request_count":1,"received_data":16120,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12d4b8b9ca3c7fd14384bf5a8faa82a0","sha1":"6f66ab3f370c29cc70a44381f84e675823f48e05","sha256":"18a18caa22fb8794cf3b3ece0c5a270e456d626c5868a82bd52db00e0dc2cffc","sha512":"7eb559e76dac3d99af691fd2342ea29bd82af92104840be7b8d256a8be98ad84759f3032fdd74b0b8f100ca252ce82edc1996c8fdddb6f56dec939f0f7fe06f7","ssdeep":"","tlshash":"7a8000ae0082083a00a000000a232a32332b0822008e0000e3c3032ef8b20038008e8a","size":30,"data":"","first_seen":"2026-02-01T08:53:43.725051Z","last_seen":"2026-02-27T18:33:02.591422Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T07:38:05.60458Z","times_seen":418462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"69a1fe33ea0f4a159f17b756891a0805","sha1":"78b7af66a99469f0b7cbddb1fa46878736a7825e","sha256":"c18ec14b5f76a80d9bc3714f49b7d46ecc981e7fc7cc96e1c6bf7331dac4009c","sha512":"f09e2593a3d39f4c1203c7671dd4532aaca4c2712d8724f890ff52274ee859881f5bb1ac77a809710ec2cbc81697e1b36fd1ad95f12a8dbb3038f39da623d0df","ssdeep":"","tlshash":"1851529cb464507455f64504cc9b2706163abb737cc680e1faba98693f3dc077503aee","size":2514,"data":"","first_seen":"2026-02-27T18:19:54.233054Z","last_seen":"2026-02-27T18:33:02.59215Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0ab6384cc1014ecb2b95b649e2ec06c","sha1":"fba270bc4d2084425f0153bec24b1e53de164775","sha256":"88d848f10f7eaa6b6deff692b86ec4fa95580fbb3c69bdffbd6fdaed48dcf59d","sha512":"7a9c0e9459f9b999f5758052266e8f0f66f36d84a1292cb8949a8b11e63e6e7348e95e2d376486b4cc4dfb37853e54f0193374c5cf6fd1fa563bf5340394e2ef","ssdeep":"","tlshash":"2580002e0082083a00a0000002232a30332a0802008a0000a383022eb8b20030008c8a","size":26,"data":"","first_seen":"2026-02-27T18:19:54.238245Z","last_seen":"2026-02-27T18:33:02.592885Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"674dcfff2bd509ea39a280910890c9b6","sha1":"b4a8862cd26b916260383fa130e674d8d4192248","sha256":"719d0504e79a5fea70038ed97c1c55dd3cc2f4045fe5150e7dad98aef498fa32","sha512":"5c49f7fbc59e08b1b820c97facb40419aaef0c0a1fb68566cd357a5a88dbe130a06cd84a0137df8144665535597c30aa56e09e7bfc43f94265f69a41b5e906c7","ssdeep":"","tlshash":"8741befd30a1213a09fb18de75ffd2847a359487b0c6d821719d460d8fa4a8a8422edc","size":2126,"data":"","first_seen":"2026-02-27T18:19:54.243777Z","last_seen":"2026-02-27T18:33:02.593546Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"832b96ff2d7ab890cbaa274c46f04ced","sha1":"fe0826b644aba9752c3de3d1d21f69a48f03e10b","sha256":"b125617b9e81a3d2874b4fa579531d3bc05d07502974beee8634a343f42878f0","sha512":"ce82c1ed0443293e253ce2b471290b59cb6994bb18c1e1de6067a184d0d4387d92fd268936f603dcf088c83ccfdb506dc1d41bdd0457edc96c0b72cf3f82dcbb","ssdeep":"96:wXJeNetj59WhOQgg3sggUpKq+wO/tkZptk0gv5cgbNoak1g/srw/hb/oW/:w5eItj7WcQgUsghpKqJZo0gvjbNoak1a","tlshash":"73a1749639b5143049f75ceb36ef86d0756a445a7cc8c8953bac88889f73b808673bdc","size":4745,"data":"","first_seen":"2026-02-27T18:19:54.250994Z","last_seen":"2026-02-27T18:30:47.538591Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a370c306603cd419fcbbbd07259bddaf","sha1":"fbf4c0a484b118a246f2a1649d4dde7efbdcc9ee","sha256":"a497f4b8322968cff0456a2fb8fc8714c0eacb5a30b58d7190b0d267781ce498","sha512":"8aae38571212e2a136b059058f3dbe332e9f0fcef2d8d6c93b6575f4800b75e2633b28b444985d1fe0c8e9534f72265f85c316c45ba99f90025848ae1858c723","ssdeep":"96:OlKZxiiRXpdPKVlG+kpF3q5VbzQ36zPXDn42EXdn7datyqt9HHtxG1AHic0WTy:OpCb+jTzQ36zkwNdiGTy","tlshash":"d3b1de9eb9be317645bb3b7fabdf696c213280430c09c842797c95802fd48645977ec9","size":5230,"data":"","first_seen":"2026-02-27T18:19:54.256604Z","last_seen":"2026-02-27T18:33:02.59545Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"87db2426701d1b46802a56e3eb641903","sha1":"14842647b6ec8d92c73739cc19820cdfdef81e81","sha256":"445e3fac3872a41e866d82e5525a908779df09a05f9188180556c7f11b6b9c88","sha512":"a06b8104bccf4bc27b242733d6ec735442f4b463b7a55b50d3ee17dad08a4beefbe68ebca9b485718d540d75a4f957ca00beb10db4471120a9af9f8356492b62","ssdeep":"","tlshash":"0181ff6fb0f2243644f738ba36ef92743535800364cac4193aed864d5fa294689e36fc","size":3826,"data":"","first_seen":"2026-02-27T18:19:54.261938Z","last_seen":"2026-02-27T18:33:02.596156Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d95d863a3938577cb74614658413da8","sha1":"0713fcee73e34dd7bd9b50eabc350c44dcc4a457","sha256":"ec1ca7f400f7e57924e1d39fed1f4647b04e492d3022fb7baf0550f0d426e5db","sha512":"ca2dcc3d980a1b443e7103fc9ad67880aaa32a579c4197bfc8bd8bccfc47b8252964adc99b01e076559a9dfd74a114059c0f6ab0f9b6e0fadf132b7fe26d29de","ssdeep":"96:eGRLtMiqS4OxWHNWG7HZtRi/GfmAwC9DddqwddON5MqbMGqa:eOMiqS4OxYNDh1O86weNf6a","tlshash":"bc91cd3f36a335318177a27e97efa618313a15432809e8447fbc05821f6052a69f3b9d","size":4413,"data":"","first_seen":"2026-02-27T18:19:54.266696Z","last_seen":"2026-02-27T18:30:47.54026Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/components/auth/ipfy.js","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55180ff80f60751ef370c33eea6fea07","sha1":"ff3e1c62009001e0505ab8cf455797facbfb9847","sha256":"748100143447e57f7877407233e91a2baa841f30231d7838bc346ab2db17ee2c","sha512":"489af5c4f0264269bf0adc6923cd33c4fbf0f3d2a9e2c4f57e173b2e0ed728d3bb380aee1e93611a790faafa7b865f6df6e24e0ab3c4538e680b7484b7467562","ssdeep":"","tlshash":"ee61dcaa38f72535025371b90aaf92457132a4077689cd997a5c82103f5423a9bf2fcc","size":3202,"data":"","first_seen":"2026-02-27T18:19:54.201015Z","last_seen":"2026-02-27T18:33:02.551136Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68e5c22bb883ae3284cac5b602d86b6a","sha1":"de01935ae2e6f4017722deef7dc650629fc4edc5","sha256":"5d46c1f488899b5179c7b0331686266b72403d01372d277653f73c159c7b7f8f","sha512":"c9fd7a51251daf356a2a857f43ac9fdf689d20123c5f15741464f9fffa23a7d3ed61742cd25c7234f0ad4816150459d064ea2876e74a80a3db574f6ff837c335","ssdeep":"","tlshash":"a6c09b483c90b120003710671a3b134cf4a141753904dc2015018b65be740ffd43d9cf","size":131,"data":"","first_seen":"2026-02-27T18:19:54.27145Z","last_seen":"2026-02-27T18:33:02.597457Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c6ab34ddec796551282825a06e3a99f","sha1":"9bcd48b08db701a931b419bdaf4f20d47aa12878","sha256":"1c37617aa05128d6d31c392f62b79350f72f5a8737f3368699cb712eca116fa7","sha512":"bbe68e1de287999f32ac145ae53e2afe86a417981a8a95f5fe5ca996830899022fee4f61a721e67fec62435a71d1a5cbfb8cb9171bc24a3c763231e0b81e3605","ssdeep":"","tlshash":"5581b41facccec2ce5fe5e912ddb360bf0df404786dd98218ebe9a28d81668254255d1","size":3905,"data":"","first_seen":"2026-02-27T18:19:54.276717Z","last_seen":"2026-02-27T18:33:02.598442Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e596e313324c4ed026406ea705cc985d","sha1":"a645a2b2ab1ad8c0894c3cfc05135e3e3c84ce0d","sha256":"b3637df0c24fab2034a4aee19ada5da9e14b453361be4dedd1b9f7acdc51c663","sha512":"ff51fcb0d5f1cf27022bccf543735e8e8052a9fe6cba8e41b0e30c6c427506967a0db59f4fba92fc92cedede51515e4b559f88a710459dadaf49eee6dabd34e4","ssdeep":"","tlshash":"8881845e61a318bb0037e0fa62c377b634a42263f587cc0c3b9c47965fd6c649a66b74","size":3905,"data":"","first_seen":"2026-02-27T18:19:54.281841Z","last_seen":"2026-02-27T18:33:02.599161Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"990f86225e18f3e5dcb14aae6e6d4b3f","sha1":"784f4717019e77394b5d869fe78c2b18824af3da","sha256":"66f6a9cd91b5dfe753db5df4e5ff3c775767934a9b61c5650f63a2be909f080f","sha512":"a571832cbe70e639cc315d4cd24474d60254a15530082a28b9632c792e2a9d84dd4307a4a3a15801b36363ee9f320151abbb0a399dc5f3e2c9a7198cd8cc1976","ssdeep":"","tlshash":"aa51e10f3dd8dd3db4f716a5090b334f70eb949bd8daec450ee8eb5998683c4406a561","size":2885,"data":"","first_seen":"2026-02-27T18:19:54.286769Z","last_seen":"2026-02-27T18:33:02.600186Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"71b9696796b2158dd5805f76f5ace4c1","sha1":"43c3709d8f82e3be88c550be4452c395d68e3a75","sha256":"98d42db035736e3ee68fe1342f01c587642cdffc60a248f4296aac4952b11143","sha512":"f30b592215be4aef5a7d5a2c2688f7f2c5972561ff8d233a5dcb9c32ea7cfe3a7e930d0d0eed4f5c6b1a74e0d0bd370fba5c7cf75857a1a18638a8ef49b70c95","ssdeep":"","tlshash":"0b81772961a329760037b0fa66c373a534686257f587cc4c379c42a18fd7c696625bb8","size":4025,"data":"","first_seen":"2026-02-27T18:19:54.292043Z","last_seen":"2026-02-27T18:33:02.60089Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/includes/ipfy.js","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abbacedb349c8e3cf5df807783039997","sha1":"9eb553ba32cf159c4e6141fa56ddf32c0f7e76d2","sha256":"f044218065aa71eecfddfdef69a1f039c3b2c32ce4e7ac1f2474d3810c6c72fa","sha512":"b1798206212b4cc55e321c961820a40ef889010d78a545eede9536bbee3a3c17d7c0cac252580642cd32debe6d4cad37da57cb4077cab8dec622d820eeebc75a","ssdeep":"","tlshash":"a941dae922f7606e0a63206c1bebc10b6727d40b3b89c5587e9c71022f8527987f1bc8","size":2326,"data":"","first_seen":"2026-02-27T18:19:54.208801Z","last_seen":"2026-02-27T18:33:02.58015Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2dfd47c6f36dda3daa52d3511ed5606","sha1":"c89894585feb11b8aac7a9650e647c0cfc9881a4","sha256":"c824a520d50a1fc5cd149f2438fc64b096b8a51aa3694411f3e291ed9a69f2a8","sha512":"70a0e16169f69c0efe8fd8d4dff098e3096e65fbdbb8b8729e25c72922e6bc11e767ffa8c02aa057930910921fb931b9e51634894764019a2bf5e91d1c793092","ssdeep":"","tlshash":"3241b0eeb1f1287408f721ae2ba789943531809760cdd4203fad89cd1f669c58e73ad9","size":1915,"data":"","first_seen":"2026-02-27T18:19:54.296472Z","last_seen":"2026-02-27T18:33:02.601526Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c262dccdbf1f02d183da5daf14d5dd6","sha1":"e61e75c7067146e9998d7e1f816c994d1983dfef","sha256":"a99aa87bc6fc449113c8a7bf0ceaeb7642fab776cab8a686d6aa38ac40b63756","sha512":"921e24dae8fea5c2898429e441a1df1d287033c587cd22f0c1e536b620af6c9c1fa428be718f7c3896ae9e3f3ed61b790516a8bc56b15bf41d03fc1bdfe38024","ssdeep":"384:IEccMxSSa2wumtIJlS8wFGi+cP/rraywB:IbBwdFMi/rIB","tlshash":"a4425ecabcf3247510b7767a2bdf9944323a44070ccac9507dacd9115fe2b868966bf8","size":12376,"data":"","first_seen":"2026-02-27T18:19:54.300805Z","last_seen":"2026-02-27T18:20:40.013103Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-12T07:00:52.636229Z","times_seen":48872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5e19317d79675a9bed2d28e2db1958d","sha1":"850b7a8c9c7455c8e5415ee9b6c1a2c59ac81e43","sha256":"6a07a9f0cc9488e303a440990c253caa2b9e90f5c90213ee0e272a2844a4ef55","sha512":"618ae9942a7a88f42f21dff75270f680a17b7e47ff585969d4ccee3bf0d95ab6565e061dc0e388cb9f27dc2e1a42dc3102d34ac59ad6d85bf9ef69c3209de0a7","ssdeep":"192:TMc8Em33HZ3SbJXgvl0/svqu1gvnIoJvwJyQl8LsfwIcQfBr6xKEGi4hThZivyNp:iYu8o8A4W0GdhnQ6Zqy","tlshash":"b722618b76f7146599f3b118c7efd40236a746074c86d825bd9fd4408fe62298a13bf8","size":10103,"data":"","first_seen":"2026-02-27T18:19:54.310972Z","last_seen":"2026-02-27T18:30:47.553804Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"betlucro.fun/","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T18:19:00.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:19:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ousrzdVRt%2BHYpoopUBSZN2l7q78mJrSf6AZwRXMGhdnsje4E2y41yAFxPZemF%2BtkV0YpqInoEI6bFpOW8r%2FZ0EQpnoO%2F1swAY06AAg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49b0213c25bc80-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":303375,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (863)","md5":"67d25fff34d0a3b327e917b269a66dba","sha1":"379f90982090d87b07371fe035a758fb51492ed3","sha256":"49f4949f696027eafb4bb2c45fe26b1cab105beb1a5451e368cde8f5ab0e8ea4","sha512":"b869b7f2145a1f3fe769cfa9a741684d70e99055f5a257cdda1449b37a51a3bff14ba1d2b5b01258754c6634237dcdf4933f5fed43b7c82e516476ffed236647","ssdeep":"1536:icw+QJFMI8I6++E4jxgN98uNgGTc+S9Gi2xIREdRVc/iWmRzVj4aZOXIREdRVc//:icwcg2gi4lGmPkLqLg3nQWu","tlshash":"0d5419a5b1f251fa5053e3a02fa71a2a39295493dd0bc64c7bec06a05fc7dcd8827ed4","first_seen":"2026-02-27T18:19:54.147055Z","last_seen":"2026-02-27T18:19:54.147055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":108,"dns":67,"connect":9,"send":0,"wait":240,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/igamewin/fortune-snake.avif","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/igamewin/fortune-snake.avif HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/avif\r\ncontent-length: 21789\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-551d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SH5XNpmBe2EvnqO0Y0Z6JK7A9wJltwVPX8CZpfnyfDoiOpeTJXmF8niBiwLguE3aZcSOI10FZy%2FhsrSL%2BBv1TeZoKd5Oc%2BXzdAMWzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49b0321d9d3e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21789,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"65aa8076a8c5c0f75bf5cf3143a8a891","sha1":"474d7b2390c8b21625428d492818ce2b1076d645","sha256":"79b46fbcd2ca168ae4b12fb7dd0993a2f34d0ece25a0a7d4ca89fc3b3b85908c","sha512":"d1f21c872aeab40cdf0a49d37593ca0f9cfee794cafca5652257819ecb49a77777cc33cf2173c8eaf63411457f65bdb35e0b9baeea360f65db28038dd2f4cf61","ssdeep":"384:HRi4gqVjyomaHXSIINMDWXvkFeIwI+qAX3zhvx9atEml/RIEM6t5T2ZcEO:xi4plKaHCIS22keI9+qSzhZctEmoc2yf","tlshash":"4ca2f125d15df8bcdbcb8d39518f99a8020516b0cbee2745125a77bce7bb1ee0132760","first_seen":"2025-03-19T17:07:32.469642Z","last_seen":"2026-08-08T07:58:04.764914Z","times_seen":730,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/api/system/user/ipfy_auth.php","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:04.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"POST /api/system/user/ipfy_auth.php HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"ipv4\":\"91.90.42.154\",\"ipv6\":null}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:04 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DaGcUj8SmLHnmS6dMy0IDNYcyuOzdrUI78CqLyvCE7mXISep0L12Cv3ur3jKvjhXWQj2AY1dgIg2z9DC7PwbsNnzQF6Tz%2FUJvmXuSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49b0372eb53e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4f8d2d353a86d3561152e9853e61d62d","sha1":"b189f07cdf4e0b8679adda4b3e3e4f0272dff697","sha256":"db6906aec18a6c3f3b337b0e31c157f45d944132bdc8deac1b9828ac52e6eef9","sha512":"19bb4e35dc93019d4b36ac5910f18249cd4ce36a3ad12f8e4b23d6e5c31a6174c16bc2e4727e188d72e672c120aea283b4e6e6dd276ed23829c7582668f2e33b","ssdeep":"","tlshash":"5e80002a080820a88cc0c080c200ba23c30a8238380830208008300822af0a80220c23","first_seen":"2026-02-27T18:19:54.154557Z","last_seen":"2026-02-27T18:33:02.57939Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:01.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 27 Feb 2026 18:19:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 53\r\ncf-ray: 9d49b023fec035a6-OSL\r\nlocation: /lucide@0.575.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":104,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api64.ipify.org/?format=json","fqdn":"api64.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.237.62.213","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ipify.org","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Sun, 07 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F7:FB:D7:A6:46:74:41:70:1B:A4:47:72:CE:46:DD:ED:B9:6E:58:0F","sha256":"65:A6:3B:17:C5:1E:19:D8:09:8A:AC:AB:C5:CE:0D:B2:4A:06:47:FE:31:29:AE:DF:7D:4F:A1:83:07:B8:E0:C8"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api64.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":453,"dns":20,"connect":154,"send":0,"wait":161,"receive":0,"ssl":280},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/igamewin/ganesha-gold.avif","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/igamewin/ganesha-gold.avif HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/avif\r\ncontent-length: 16220\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-3f5c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeBBCuu%2BbzWM%2FS0pEuBR1oU%2FXL5lulJng2A%2Fs1wLokMujjem3l2BHZO1XIBbLd5e9ktvlkimTHNZWUQYfJagV63wOTACrLI8yvvb1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49b0322da13e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16220,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"42e5bcb0f76e21b6743e2050f4899d83","sha1":"93b5eba8e30d1ae699553e0035da5c343e070085","sha256":"c7e359923ba5672e26c8c8c7ea2fc5e8a9a57b58cb4a0c26ea8e636fbb30ec19","sha512":"d19a56bc762b6343fe9a2d85df8be009248f7f1191594d8bba49cf47a0354f09b65e078ddac9373661726578915def72da04693671b981ca1ef503fe711b2a05","ssdeep":"384:AfG0QSd+7bMOH061gVPrLL8EarfePSUjnQLrSV4Mi1BE9N0y5:AfGPbMpJrMEarf0arSV4Mi1M35","tlshash":"c572c099bca93df0c1baf7bae96382334640226d49c3117df880277919b4ef94019e75","first_seen":"2024-12-01T15:43:36.228242Z","last_seen":"2026-08-03T10:46:11.213959Z","times_seen":331,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/branding/20260203234408_93c74cce1b08.png","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:01.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/branding/20260203234408_93c74cce1b08.png HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 04 Feb 2026 02:44:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6982b278-177622\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5cnj%2B5Ud1YN18LL7Bg2B4XcKoOcyHwdUMYLxYuyATKx7jXqVGeMYNx92zuqtppRonP85RqRvM0tIQAqTG8vJlRULq8uWMyrgES6CA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49b023eab93e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"7bd8682f518040f55a5712bd31c5bd47","sha1":"372b8ededfe2113efa8518d9d54191113843b7ce","sha256":"168e51223c0a6401f72ca7e9530e34c5ef01cce1b27336c5751ee6a8bccd6a02","sha512":"dca46c38393683df77bf6bd7fe6d25c03c42bdd6ebb6652f1cc815fd2cce62440685835f913bd5b6bfc8f28d94553fa2f07815287fb1df56e798e9375b77efc4","ssdeep":"24576:P/0YEIwak2RbsK5fdTKYgpz4tD/zYfjQ7owboaRUrpj3F:P/gIwQRbscBa4tD/M7QswboaRUrpjV","tlshash":"9c253392f3420f68ce6679b4a4ed79bebe9f514c7c440bc720b94cef9da47290096187","first_seen":"2026-02-27T18:19:54.162963Z","last_seen":"2026-02-27T18:20:39.999925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:01.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:19:01 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::crrwr-1770516958843-e8a5a5e1e05a\r\nlast-modified: Sun, 08 Feb 2026 02:15:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1699381\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HtgWnQ%2FH3fDLKiu%2FkiL2HIc4yZ%2FfwrycmjlxNYUeiAgGzp8Lxh3L8xha%2FAiE5jA4bwTIzUBh%2BgoJRKX%2BZqnbPc0Jfmo2JYUGg48AbyjuW8vFA%3D%3D\"}]}\r\ncf-ray: 9d49b0247d70516a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-12T07:00:52.636229Z","times_seen":48872,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.145Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/igamewin/fortune-dragon.avif","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/igamewin/fortune-dragon.avif HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/avif\r\ncontent-length: 16220\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-3f5c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcEbXcGr2L4KsM4L75lu9acpHPwo97m9U6oQo241SosAmVI5B40CioW%2B08wGyjg1oi3pAPoj3mI8KMg2mfvjhk6qDX34crcK9uXxgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49b0321d9e3e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16220,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"52e17d0fc450a75c9b5d031ddca5653a","sha1":"93f4cdda94e9ba02b08bc300752d5a8e42c861f4","sha256":"ed0de8ed82f1fc89f6eccfbd6e741680e4cc62328fed2c11b1f9d6451e69f37f","sha512":"a9ff37731a867200a595d664b1da30011db828769105a6d524fcd4815447ccd30295cb4121e5b99e920f8ea76b34932c37518c8f98e25b2c55b516e49de98df9","ssdeep":"384:wqGivA+O3bUGqZc/NArnn4zLhB9h4IwIoNK2R9pknX/8yJGjM1eR4f:yQOVqOuT4/9hnwImK2lOvkjMt","tlshash":"f272d073c3816caae41b457281ce551b4dca99049baf3e248f3c39717eee576611063b","first_seen":"2024-08-22T23:03:43Z","last_seen":"2026-08-09T05:01:31.333117Z","times_seen":789,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:04.089Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/system/games/btn_star_off_2.avif","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:02.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/system/games/btn_star_off_2.avif HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:02 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1036\r\nlast-modified: Sun, 16 Nov 2025 03:34:06 GMT\r\nvary: Accept-Encoding\r\netag: \"6919462e-40c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suCK4hIOX04N8nEp%2FjensdKkLWEMYdfFIT%2BvH%2BJeb64HyJaXeK1uxAXqaQJjcO3u%2BF1eTEvwq%2FyGjlOpOJQzIcujS5yi5uy6UTOGVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49b02d8cc13e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1036,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f9b6a776dcb8e53a1e22c1c1a7db2b1e","sha1":"52638a0c4fef4928975943596e67228a2b068de9","sha256":"12f53b8b3a8f1b20e8e5ed3d3f5edfde34f5859d49d0055950828630f26d2695","sha512":"ecab7d9479debfd6e786e1296326066784b626ba9dc78678ba1cfec7d72a24e875c353f334c7262b99559dba8198286be93921f685fa2b8a2876bc42f34c9fad","ssdeep":"","tlshash":"7611509043a42922e86b03760dc9d6125b34aea2a3f374cad84077285a3d1fedb2de14","first_seen":"2024-08-16T09:56:55Z","last_seen":"2026-08-11T16:00:37.939926Z","times_seen":17508,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/system/footer/instagram.webp","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/system/footer/instagram.webp HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3042\r\nlast-modified: Sat, 22 Nov 2025 01:17:28 GMT\r\nvary: Accept-Encoding\r\netag: \"69210f28-be2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpwJ0XidiBJMnQCaOaADcolYzSSrdPQAfRo0OASV3JbVAFuWHP33fsaNGtDRIwWXhr2n7Gi8X24IuYSw1UyVt920pHzN3hgTpSkmOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49b0322da33e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3042,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a038b2c9d38a8eef81a459f5d3fb6737","sha1":"afec19aa1684592edbdff958e4c9593ac7d3c0d7","sha256":"98e23894080a3c1908661ceb4aa35cc86393ad8afed165721cdf5c747b54dae7","sha512":"69d32b22826ebce33f803b8b2ebf6214779025dfb327d69035e67a24b1d359c4f9da87a20764d6bb265f444114d7ed8d82d67f576c321cab4d5a7c33ef81be6c","ssdeep":"","tlshash":"30513bb5c358b61ce428cab1b4030e1adb764c8b6647a39c878351363f202c2297fa5a","first_seen":"2025-03-07T18:46:00.315684Z","last_seen":"2026-03-14T08:53:21.09299Z","times_seen":5,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:04.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:19:04 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49b0367f6ddbb0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:04.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:19:04 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49b0367f71dbb0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/api/system/user/ipfy_auth.php","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:04.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"POST /api/system/user/ipfy_auth.php HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"ipv4\":\"91.90.42.154\",\"ipv6\":null}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:04 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZsvD6rf0k7DW1N60PIbILWNL6E0SxDktR2kEiNkuOJNifuXLfT7YwbVbCMUg1SutKfG4X4a1f0yiN0hgjuIldlcJBkzh6X2gmMS7dQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49b0372eb63e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4f8d2d353a86d3561152e9853e61d62d","sha1":"b189f07cdf4e0b8679adda4b3e3e4f0272dff697","sha256":"db6906aec18a6c3f3b337b0e31c157f45d944132bdc8deac1b9828ac52e6eef9","sha512":"19bb4e35dc93019d4b36ac5910f18249cd4ce36a3ad12f8e4b23d6e5c31a6174c16bc2e4727e188d72e672c120aea283b4e6e6dd276ed23829c7582668f2e33b","ssdeep":"","tlshash":"5e80002a080820a88cc0c080c200ba23c30a8238380830208008300822af0a80220c23","first_seen":"2026-02-27T18:19:54.154557Z","last_seen":"2026-02-27T18:33:02.57939Z","times_seen":9,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.utdstc.com/icon/369/903/369903d1754537277dc661625a110396f6a799b7c07cb9e4dea3577c6ea78ee0:200","fqdn":"img.utdstc.com","domain":"utdstc.com","tld":"com"},"ip":{"addr":"151.101.3.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.utdstc.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 12 Feb 2026 07:16:57 GMT","end":"Sat, 14 Mar 2026 07:16:56 GMT"},"fingerprint":{"sha1":"FD:0A:20:93:33:28:F3:F1:56:40:63:13:E6:D2:1B:A6:9F:B0:F2:E2","sha256":"A5:01:49:B7:04:6C:4C:D6:9A:AB:74:47:DB:5D:85:9B:A2:94:DB:DA:22:C1:50:18:FB:07:2A:74:D7:8F:91:8C"}}},"request":{"raw":"GET /icon/369/903/369903d1754537277dc661625a110396f6a799b7c07cb9e4dea3577c6ea78ee0:200 HTTP/1.1\r\nHost: img.utdstc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 26 Feb 2027 02:02:44 GMT\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=31536000\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-type: image/webp\r\naccess-control-allow-origin: *\r\nvia: 1.1 varnish, 1.1 varnish\r\netag: \"69930db4-3bfe\"\r\nlast-modified: Mon, 16 Feb 2026 12:29:40 GMT\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\naccept-ranges: bytes\r\nage: 144979\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\nx-served-by: cache-hel1410029-HEL, cache-hel1410023-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1772216344.510914,VS0,VE1\r\nstrict-transport-security: max-age=300\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15358\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":15358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2cbe9777d07ceac68b8d1914b80695ad","sha1":"6027bf32845707a8c9cf776cfc535351f8aaaaaf","sha256":"23f83a5a29fc714f19136c4ed2c1b436450561ffec1eb253186bab604aeaf8c5","sha512":"4d7dfdaf5562f150055618886b9679f0628a97b12ef2e0be1393b134c002b20d4b6eca86f766e92c1efb505f73aa4fe2c8418d05cc4575df4fc09bf0c7f127c0","ssdeep":"384:inA0SYRtpX4A/0F+kD+0WK5nwcLtiYOroyaHNdK40:iAopX4A/0lDn5nwcLIpcyaHaB","tlshash":"e162d0866463ef06d36f43952cafc5e2e319de0c5272134ee2d78761582d43f8a5cb8a","first_seen":"2026-02-27T18:19:54.173564Z","last_seen":"2026-02-27T18:33:02.586907Z","times_seen":9,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":102,"dns":54,"connect":26,"send":0,"wait":33,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/system/footer/telegram.webp","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/system/footer/telegram.webp HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1862\r\nlast-modified: Sat, 22 Nov 2025 01:18:52 GMT\r\nvary: Accept-Encoding\r\netag: \"69210f7c-746\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYw9jbUv1DieY8%2Fi7TIgG0YlyNxKoPJdFDCIGSYoPj5%2FkWOd8Vo0nx5dyej33SwGAURgQjv8w%2BEdMCNkzLTbhAZ9kUHUyobtvVtfKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49b0322da43e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea5156e99727e451dbf083268b7a548a","sha1":"8c3b8af85b095df236bf94da63a4bea8188ebc3e","sha256":"ee23547cb88e50692fafbaa71be5ca5be54135f8e0c97c72d94dffc370d70055","sha512":"afce91bcee01b987b5114fc410ee1c59ef3dac466497919f1a4bd5ef561ce916c56546b85a6b8264fb2e1979d1dc107dc2f381fede8c4248210a46bd4f89d35d","ssdeep":"","tlshash":"e931daa843b5479dd5d129f4024237a1e7d83f07ca8d7757904642230321ed5795aada","first_seen":"2024-11-25T20:36:43.372174Z","last_seen":"2026-03-14T08:53:21.130679Z","times_seen":22,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:04.085Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/banners-auth/banner_auth_20251229_093734_61aa62c6.png","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/banners-auth/banner_auth_20251229_093734_61aa62c6.png HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 29 Dec 2025 08:37:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69523dce-a4bff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2ByNSMi5IgIwkSnMyBUJ%2BERF4bC6fx6RrjIdiBxLB0IIhSXCtUX1vgszFkLCW%2FrmjwS8v%2FWBTb2H5FGilM9ajBYkdm3u%2B7Zg%2B3SM2Tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49b0320d963e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":674815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 420, 8-bit/color RGBA, non-interlaced","md5":"88fa37dda09c6831782cb25852409c05","sha1":"4d7b6bd3ce814f7db7d6f57a01e062fb3422facd","sha256":"bfd5d4bbba00665d565000ed791080b505463cf0b987fc37b6394b3db1ba94a9","sha512":"bd7fe587ae8b237ad65a59750501bf8787ee2868893291a31b32908c4fda4b688340cfe100696ebd15d019fedb826823edbfded7aea95b196ba3b7d0935231aa","ssdeep":"12288:pZgT48B3N8oo1jeBYrHegk+Q3Yn6i1dNPnHNYh4mfQ8kvmSe3xwp:pZgTTan1j1+gkqn6ihNYqr+VBwp","tlshash":"80e433d51f166771997fc605b08cd241e2709b38a3e7dd37880ae0e11a7d7ee0dac066","first_seen":"2026-02-27T18:19:54.181083Z","last_seen":"2026-02-27T18:33:02.57626Z","times_seen":6,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/igamewin/fortune-ox.avif","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/igamewin/fortune-ox.avif HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/avif\r\ncontent-length: 13789\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-35dd\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JyCHaQqjx1QW6sbP2YeRsNYyvhNYxIfw5%2Bz0%2BGakw7pkjw61dEbjKiI3mytMxHDtZyQUflJf7Iz0Ek8Kz2guQTNAK8l31Ash8nmrTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49b0322d9f3e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13789,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fb341b0d27383a57252c3fa963361571","sha1":"5430b57e39d5ae7154cc57b375fa531c444d39b3","sha256":"736c419c55913744a1ab7bb03980e433debf8b9b8dd608bc00bf5ec0bcd7bb41","sha512":"cb65461c4a410b7ed5b122491e4d7a72cbdebf3c0fb7c386f13e40497e9f4cdbf911ccae024653bd5c56b5de1d289331899a1e711a9cfda19831f6cfbf641ed4","ssdeep":"384:NkJwlBmWkUQfxM4hgqLmaCxGv9e/omkolu7+E6eXOad0:aw6ZM4vrgGBolm6kv0","tlshash":"4352c0ded3e51f10d8b11d7903d7ef1732b665d36f237384c4d513941280b6a9a24a5c","first_seen":"2024-08-22T23:03:44Z","last_seen":"2026-08-09T05:01:31.232717Z","times_seen":849,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:01.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 27 Feb 2026 19:07:01 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTBa5xPnuzM4ESq3dDm7U37esa8tcu8%2FZxuKYCByWs2cA1YyIB3eax2R0tt1aynHsQ2VlrDLgA6UrX4afgpD59J9GufZdgtLGCyUiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:01 GMT\r\ncf-ray: 9d49b023eaba3e6a-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T07:38:05.60458Z","times_seen":418462,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/branding/20260203234408_a2b89eac1631.png","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:02.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/branding/20260203234408_a2b89eac1631.png HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 04 Feb 2026 02:44:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6982b278-177622\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KxXlA%2Bc4IdoGQF26W%2F%2FWrZo71hNPE8jXWEJwl0d%2BaMiTI2syg192F39sv8Bzk2gGf61p5Iiy3jrvN6ksuSKm59YKDOyICB65G3WlXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49b029dbf53e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"7bd8682f518040f55a5712bd31c5bd47","sha1":"372b8ededfe2113efa8518d9d54191113843b7ce","sha256":"168e51223c0a6401f72ca7e9530e34c5ef01cce1b27336c5751ee6a8bccd6a02","sha512":"dca46c38393683df77bf6bd7fe6d25c03c42bdd6ebb6652f1cc815fd2cce62440685835f913bd5b6bfc8f28d94553fa2f07815287fb1df56e798e9375b77efc4","ssdeep":"24576:P/0YEIwak2RbsK5fdTKYgpz4tD/zYfjQ7owboaRUrpj3F:P/gIwQRbscBa4tD/M7QswboaRUrpjV","tlshash":"9c253392f3420f68ce6679b4a4ed79bebe9f514c7c440bc720b94cef9da47290096187","first_seen":"2026-02-27T18:19:54.162963Z","last_seen":"2026-02-27T18:20:39.999925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49b030e8a2dbb0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":50,"dns":20,"connect":8,"send":0,"wait":111,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/BgH9d8bzsn4n0yijn4h7IQ/eed2ec88-4b07-48e6-cf9c-2c84e7563900/w=1200?quality=95\u0026format=auto","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.2.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 10:14:15 GMT","end":"Thu, 28 May 2026 11:14:13 GMT"},"fingerprint":{"sha1":"EA:B3:E0:28:60:40:29:57:A0:50:95:6F:9C:2C:7B:FC:A7:7F:E9:27","sha256":"4D:5A:67:5A:8A:72:85:56:0B:DF:CE:74:75:B0:1E:1B:EF:E2:8B:3B:9D:1D:E5:56:92:DE:00:BA:71:08:BD:9E"}}},"request":{"raw":"GET /BgH9d8bzsn4n0yijn4h7IQ/eed2ec88-4b07-48e6-cf9c-2c84e7563900/w=1200?quality=95\u0026format=auto HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/avif\r\ncontent-length: 63501\r\ncf-ray: 9d49b0310a36be94-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 274006\r\ncache-control: public,max-age=31536000,stale-while-revalidate=7200\r\netag: \"cf_6v8WVdnTPaU40WUtHDUMBnv6Jj25MTnwOMOzxp7DQ\"\r\nserver: cloudflare\r\nvary: Accept\r\ncf-images: internal=ok/- q=0 n=9+135 c=0+0 v=2026.2.10 l=63501 f=false c2=y\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63501,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0b1630bca627e8f144584f89d5e10281","sha1":"aa3fdae87fe5f78308cef06a140caf407bb4fcf3","sha256":"d51c1d6161bed5ec198f5269e7adec72954a71b143a25a361e251c98e9c2d98f","sha512":"644dda9c64f433a50cb38149b5708d4b0001b35c61cf65969b40274ad4aa6709c7d592f7a282a3d37d9714b1a062887ffd208e9ca7481e71af92a53b016ce54a","ssdeep":"1536:foQzDMpgy+CzpOSfM+2LDG2iphN2RoYD/+1IICzp7:1fMpRfpOSEB+2iphN2WYDuVCzZ","tlshash":"8c5302cd2a429fda47f2c537b550ba861112b64dcbfb15aff45a17de0e028797210f06","first_seen":"2026-02-27T18:19:54.186971Z","last_seen":"2026-02-27T18:20:39.990686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":54,"dns":33,"connect":8,"send":0,"wait":53,"receive":9,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/api/system/user/ipfy.php","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:04.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"POST /api/system/user/ipfy.php HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://betlucro.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"ipv4\":\"91.90.42.154\",\"ipv6\":null}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:04 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FDqiQi%2BFFwYmKpBZUumvZS%2BSi5TH1XVQLoj2Gm8fx0pmh04%2BaUio7GKDDan7QpdmIWDKPx1orGbR9an7gPBGaI%2Bk1DBg%2BpymvdbDMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49b0367e973e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2a52097d7f03606103253314c4ca024","sha1":"36cc882ab0dfe9f43bfbad3d4250951a80b7a2f9","sha256":"38667e60226bf99701916900a2a265233dcc014e1206c173ade921d608824b53","sha512":"cf6526aca8465b7bcc7c419960796aa7dc5c742c0d43ec7f77a7b9e1450f675f98cba4d47807f2754208faf58be4463e54812618f31afc2553244135a43bb3ab","ssdeep":"","tlshash":"43600000000c0c0c00c000000300f300000300003c0c3000c000300033c300c0000c00","first_seen":"2023-04-10T00:36:02Z","last_seen":"2026-08-11T08:25:09.002034Z","times_seen":515,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:01.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 27 Feb 2026 18:19:01 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::dt8dx-1772215622938-5de74e51c6ff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 718\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMILxClU3B0MxVXoeh2p5XBm%2BJHBSkTTfFDrW0q27RfQk0uRB01vEudMNm9LmJDY5qedbbQ8ZGcMuurLe9bZvByfMEkJG0R6aJhIVPJ%2BX1DZzw%3D%3D\"}]}\r\ncf-ray: 9d49b0244cf6516a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T07:40:40.2056Z","times_seen":17851556,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":66,"dns":34,"connect":8,"send":0,"wait":12,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/components/auth/ipfy.js","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:01.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /components/auth/ipfy.js HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Dec 2025 08:21:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69411692-c82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjSedD%2BjVySnqvm1ZHTL%2B8Hv1lhy72iRjTykpO342%2BVUt3bxA%2BF%2FHk44kHQ5vBwN7rFHonbVFnRo0YhdjfJCnDAW5p0OeqPYRXEP%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49b023eabb3e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"55180ff80f60751ef370c33eea6fea07","sha1":"ff3e1c62009001e0505ab8cf455797facbfb9847","sha256":"748100143447e57f7877407233e91a2baa841f30231d7838bc346ab2db17ee2c","sha512":"489af5c4f0264269bf0adc6923cd33c4fbf0f3d2a9e2c4f57e173b2e0ed728d3bb380aee1e93611a790faafa7b865f6df6e24e0ab3c4538e680b7484b7467562","ssdeep":"","tlshash":"ee61dcaa38f72535025371b90aaf92457132a4077689cd997a5c82103f5423a9bf2fcc","first_seen":"2026-02-27T18:19:54.201015Z","last_seen":"2026-02-27T18:33:02.551136Z","times_seen":9,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/includes/ipfy.js","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:01.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /includes/ipfy.js HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Dec 2025 08:06:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941130e-916\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xO01nK05kIfG2cjShcDkvQRI3ainzZnTkLWEptJPK%2FhhP5hJuzb4TwNf3NCFAj5ueHiu%2FpsZpi6nURpiDj4HWqmUxeZsNgSExPb%2Bsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49b023eabc3e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"abbacedb349c8e3cf5df807783039997","sha1":"9eb553ba32cf159c4e6141fa56ddf32c0f7e76d2","sha256":"f044218065aa71eecfddfdef69a1f039c3b2c32ce4e7ac1f2474d3810c6c72fa","sha512":"b1798206212b4cc55e321c961820a40ef889010d78a545eede9536bbee3a3c17d7c0cac252580642cd32debe6d4cad37da57cb4077cab8dec622d820eeebc75a","ssdeep":"","tlshash":"a941dae922f7606e0a63206c1bebc10b6727d40b3b89c5587e9c71022f8527987f1bc8","first_seen":"2026-02-27T18:19:54.208801Z","last_seen":"2026-02-27T18:33:02.58015Z","times_seen":9,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@0.575.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:01.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /lucide@0.575.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:19:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9d49b0253a615fac-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 712405\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 27 Feb 2027 18:19:01 GMT\r\nlast-modified: Thu, 19 Feb 2026 12:24:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8BVXy+/tHBRhbAuCI4PHS/I0wiLM9GmMiwC0nVADDiY=:\r\nfly-request-id: 01KHTXNVJSDP3DHKM4Y4CXBCZE-fra\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":392129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65368)","md5":"7e93d3434587cb410db274e4f2d8976e","sha1":"4ad59c32e25887497f1819c8e42fa47e46421db7","sha256":"f01557cbefed1c14616c0b822383c74bf234c222ccf4698c8b00b49d50030e26","sha512":"4028a8993d7faab9ef09569c9af0956004c9815efaa2bfbf02401478f591c4959796e513ba0e1d8b9f11aae786688a63923f9e2c822e51424bbf655620ab9934","ssdeep":"3072:hcIl2IQWkHpsHqBKdxKuo681z3fsjHhmTPO4Ljbq5jUkm6WXrEHbiePVFtSAjpKN:2EQaH814m6EElPDoAAR5a2B","tlshash":"0d8463af8fcd269f4c56e7881a4bb0111fed93bd331a8c12768e963bc252416dcb3651","first_seen":"2026-02-19T12:32:30.318976Z","last_seen":"2026-06-28T05:45:16.370708Z","times_seen":716,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/banners/banner_20260216_104249_59aab4fe.jpg","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/banners/banner_20260216_104249_59aab4fe.jpg HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Feb 2026 13:42:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69931ed9-272d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOkZEfLczulZbzq8n9%2FYYiomYDtfVE55Z6rKmYG7YEX9Xz47%2BMB390ntWGxJWfzcjKIfQwJEHgIU7kBjQBh5wgSY6byVRsRxc9maUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49b0309d5b3e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160472,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x609, components 3","md5":"a874a97b901fc48507831b5e728fbf3a","sha1":"42895f512173d44e3c1f93c8017e8f015c188795","sha256":"6192f68315a8687b850f65099cb6c5abf7976a2ad3402c838899c2cff19623fe","sha512":"7a37f7f92cea54c0fe58ecdde34c3c7ec738cbbeabe3df53fcfdd7c60e593deefba8f6852037d4b4ddaacd649306f931020087b1fefc7e0245d510b6b6c4703e","ssdeep":"3072:2focn1RpyJqsdrub9YOIIi4RmSv4/n++Y1V4LMVR6cn6VJ/hpZ7mL2fqMzo:2foKRpmduWqHfAmDoL6WXZpZ7In3","tlshash":"60f32221751213b5a3e902b1d01c56c3ca4af642f79beebb112c8ecf41c3e9a15e52b5","first_seen":"2026-02-27T18:19:54.21454Z","last_seen":"2026-02-27T18:20:39.988201Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlucro.fun/uploads/igamewin/wild-ape.avif","fqdn":"betlucro.fun","domain":"betlucro.fun","tld":"fun"},"ip":{"addr":"104.21.18.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betlucro.fun/","date":"2026-02-27T18:19:03.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlucro.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:48:38 GMT","end":"Mon, 04 May 2026 23:47:19 GMT"},"fingerprint":{"sha1":"09:7D:FD:11:EB:99:E9:EA:8C:9C:ED:3D:66:F6:E8:8B:CE:67:64:D7","sha256":"FF:F9:D7:CB:38:19:95:86:18:AC:DE:26:81:93:42:05:1F:B0:ED:7C:FE:D3:FD:FE:C3:18:F6:F7:8A:9C:41:63"}}},"request":{"raw":"GET /uploads/igamewin/wild-ape.avif HTTP/1.1\r\nHost: betlucro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betlucro.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a18ff1672c8838a76638f7ac5ee28d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:19:03 GMT\r\ncontent-type: image/avif\r\ncontent-length: 24226\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-5ea2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1tP8sBzGAvrsqN7KbunBm8DyE2L%2BsQy2oeEsSLAp0UcikyTuBQSxa6e38W87KNIGdYIx5Qx1drienNpk5F4mYQG4bA67wINupcIpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49b0322da03e6a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24226,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"26936b01ef861127cd0288d0e40b8714","sha1":"6a342e88c805421b759a7e6eaf98944aa4cf2e14","sha256":"de289fc708b507cfdd867e0b1dae77873513400f2fd9e3d7e1df63f27871a131","sha512":"8572b44de9c0e93989caef2c217b6c276ca28e4d3958b9b98f907696ee0dc557617ece11496e4054878736d77b0707f54536a54417391c745721d83d5cfa0ef6","ssdeep":"384:z08KmF2fjmg4CnoTi44evBrslaMD5ClmN/DC1lhjbTQUTE+PUrtJP9QDN:XTTlCDmm9DCv5bbT/PydKN","tlshash":"71b2d0b103a18863a0fd0f71013717f52ab18638764e667fbacd9bd1634b5d8e62e294","first_seen":"2025-03-21T08:06:36.392635Z","last_seen":"2026-08-08T07:58:04.648311Z","times_seen":269,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}