{"report_id":"0f7b8031-7cc8-44aa-aa7b-23d277cc517e","version":0,"status":"done","tags":[],"date":"2026-08-11T10:28:35Z","url":{"schema":"http","addr":"1127bet1127.com/","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"104.21.13.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1127bet1127.com/","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"title":"1127bet PH Login - Access 1127bet PH: Your Gateway to Thrilling Online Gaming Adventures","dom":{"size":155778,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (608)","md5":"8f0e0fdd2e7dd018ef86b59140fcdcf5","sha1":"8eb2889056b6d3069e8a4b1f50474808c5e38547","sha256":"5f1f96d0025a2cd7d5b62fb62a34f95c0336ffc3ae8afd994a394d668201a263","sha512":"d4f844668441c43394400daee9fb1012be7a32506b913813eb97f7ae0ff5c7c3feca4b72abe879e070562ae14fb648e4620977ca6cefb0bd839ce747ba9b7e03","ssdeep":"768:4uuuBWB7D5l0/OOwGW2OOwGrxO8mOO8R5OKe2OKNo4gWxkYtO8LaO85CO8fhcj5p:4uuuBWBD94g1r2f0Z/s/mrwv5EZ","tlshash":"04e3fb2191f5503740a392e1ab755b5bafe1ea07cb174608b6bc0bc89fe7d82dd2325c","dom_hash":"domhash4a63ce102098a116a6ab82f3be790ae5","first_seen":"2026-08-11T10:28:42.201634Z","last_seen":"2026-08-11T10:28:42.201634Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1127bet1127.com/","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"104.21.13.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T10:28:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"1127bet1127.com","ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-11","domain_rank":0,"first_seen":"2026-08-11T10:28:37.301839Z","last_seen":"2026-08-11T10:28:37.301839Z","alert_count":104,"request_count":52,"received_data":3554133,"sent_data":26783,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fengge5.com","ip":{"addr":"172.67.156.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-17","domain_rank":0,"first_seen":"2025-10-14T00:29:34.839887Z","last_seen":"2026-08-08T10:01:11.527017Z","alert_count":0,"request_count":1,"received_data":312844,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"qio111.com","ip":{"addr":"104.21.83.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-10","domain_rank":0,"first_seen":"2025-09-22T06:39:10.105852Z","last_seen":"2026-08-07T15:03:53.173328Z","alert_count":0,"request_count":2,"received_data":553254,"sent_data":1058,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1127bet1127.com/js/lc-1e0136bad0acfb78be509234578e44f9-lc.min.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e0136bad0acfb78be509234578e44f9","sha1":"c93ecef079d9a3d453d5d62adcc0d8cfa96615b9","sha256":"e30fce7f3a4fd232adcd6fba94949e18bd188ae9750c0a1bd5f53b6d5c496848","sha512":"32aafe0dcbe41c88699970aa8858ff788e7ff28ac0b76018c03b95c867abf6ca1957f3157747b86843cfb8b19678dfc0db241e3be6cd7740b22990d8559101a4","ssdeep":"","tlshash":"1c51cbf076664c7400cf176a177f6acf72f9b866c9c740619813f8e81abae843591e85","size":2769,"data":"","first_seen":"2024-04-26T05:38:39Z","last_seen":"2026-08-11T10:28:42.22835Z","times_seen":1949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/poker-top-section.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9904835f1ad42ad28385cca7b1e8d36f","sha1":"c1e62f8f6fb996f09d55bdfd837ff19d0b409709","sha256":"3403e53ad900915a76c2a999c23091b5d0b10c1afa8d4656fe9cf5d8dabded23","sha512":"e90321c456b21b700ad58f0ba516b1b912cd3d9273eefa37dabbbb7c3d5a8f27af694567bc116a330b1c49e5e98047a9c7ceb0b4d352493ad5c6fc6ed3396412","ssdeep":"192:xRH39ru9DMUMDuaqumPNSK+qc2ah1y/JpewFbnSEP5DCjHzIEAXSN4KEO:1IMaaDKYQ/JdFbnSEP5k5sE4KEO","tlshash":"340265686714747301bf15b6d2db7bdab37660cae50604419528cccd2db58c782b2afb","size":8897,"data":"","first_seen":"2025-06-27T23:53:39.276838Z","last_seen":"2026-08-11T10:28:42.222464Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/poker.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f931c1de359969bae27228974dbac81","sha1":"24eb85869fa8c00ad9665ceb1e925c3128a115de","sha256":"44c52f73540fc41f0cf4f33af3041075125a3a8e481787c6228beedd3ae46c04","sha512":"745c7cc441aa1577d0963ef36cb1236a2492e45ba6d32dd1f94bf9be5bb5f1cf1dd367fb7c37f89098e7df92aad2d4057a59fe7fe01be1e381b870dcd4e2f43a","ssdeep":"768:1G99ukvQaaipLUkQ515g5d5+D5f5MJfldQ4pSAUGYiY0kUwhiaU+ASvcaFT59toO:1G99DYaC515g5d585f5MJflrUG/Y0kUC","tlshash":"ac03a774a628253502af55b761bf7bc865b0208aa9424419743ccc892ff9dd712f2ffb","size":39579,"data":"","first_seen":"2025-11-03T04:56:47.180321Z","last_seen":"2026-08-11T10:28:42.212301Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"630bc67b557e22bb54fcf6a86001548e","sha1":"37f60d2ed29ed69ce11b863e8000dadb0c86de6e","sha256":"efb3525e5faa41d22379f6e1548cffa4360718dffe78faede9a464b885c912b7","sha512":"5291d035469393d3f11f8c55eb659f03e430c5f7bc68aa3410a1475c16db86dedb02f23566e2ce83524a3036115cc79444fcc89247a1bce5d9f88ea3f62d6f05","ssdeep":"","tlshash":"83a022000c38833330b88b0fca800fcef8283088fe0e20000820200280288b20ee0c02","size":75,"data":"","first_seen":"2025-06-27T23:53:39.34685Z","last_seen":"2026-08-11T10:28:42.258803Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34310830acefdc22ada90582f96120b1","sha1":"e1643f6d470b0b1144299680df87b8ec04b38d2b","sha256":"c0372fcc683c95d379c993394c31c6fc1750d022b5af8fed473cccb7bbf94c46","sha512":"ce31dff267917c2f8337213ea5d21e40b961908a345e8edf86b3398dfc4f60bb93ae5b71978154ef3b9135e15e220857338f671f331857e345bfdb5c3e131b07","ssdeep":"","tlshash":"99e0c24901d2402461f7291b5eaf324a34b210bb0948d101390c46546f653cb0bebbd9","size":432,"data":"","first_seen":"2026-08-11T10:28:42.259807Z","last_seen":"2026-08-11T10:28:42.259807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34321ce0476222856a1cc1974cab770d","sha1":"38edb26f4b65758383ecc436f5cc19a92d79e558","sha256":"8ede88ecb0bd3b1bdcda82211da668b2c6a2c03614af5c6e2063a35bfb0884fd","sha512":"4483e37dc6bec4bfb2edb72257050d22fd59f3a61a3056413d5a062c621cfe4636f2af292b4aff7b2a43ce58f4fd59029d65fa2fa97c59d13bae6d3d7e704840","ssdeep":"","tlshash":"3b317b0825e30575d687f2640f8e7b454b3622076dc1cf487c5d6c408fba4eae6c89ed","size":1744,"data":"","first_seen":"2026-06-12T04:15:49.92803Z","last_seen":"2026-08-11T10:28:42.260663Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f637b3a86c32c05d4e288206a4eaa99","sha1":"de7e130b3473b3c06721066a3e364078a230f295","sha256":"876ff8b3565d8350876d04c1ac603d4e321f6a6418d0d7fd050dadf86d1d2e9c","sha512":"a66fb129566918aa1a00bbc27aa50cbfbf5dcfc6e287c35550deff8ea93068bab7da1bb8c090d09e68fc1f01f5f6e5f5154a58d8453477d8571691f7324a5533","ssdeep":"","tlshash":"1db0120ac8a8902b196070764d030311529f4144e09021c403f6130040d392c624f842","size":94,"data":"","first_seen":"2025-11-21T09:34:50.348464Z","last_seen":"2026-08-11T10:28:42.261347Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/poker-vendors.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517719426acbb3e14501952edf38e17c","sha1":"d3096915ed40d524474600d16613d779153f0e1a","sha256":"59cde6059ddcbfd0e16a1aa9f3881ac98a4ec69eec10636568908a4c83804fe8","sha512":"a84d202714125092722211ded8eccc4ecdd6b2fe3aaf9c3028a4888deb8349950cfe81be4d6e187426b22fa32bc1661c5393262e5126b4f9725f42930691098b","ssdeep":"1536:nbQURn5fGBo9yuNBKQBcEofCpnMoolgux1bkldIUynz+:mZH77VXbi","tlshash":"cd730999b321b1a552e7169793a5c501a3b50844b409d4e8b1bd8cab2c3ed8c13feffd","size":77560,"data":"","first_seen":"2025-06-27T23:53:39.320593Z","last_seen":"2026-08-11T10:28:42.2206Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/rum-standalone.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e8251b321087f7638883fb4d5793722","sha1":"1e54932bfa11be05349c57b74370cc4d2fb43983","sha256":"7405ac8135bc57a96fb585cb03c7c950476620ca0db911d7f4e3848f6f499c20","sha512":"c1fda021959b10d95e49d40913ea356ba58b244efe2ac589a3080798da9fddd003c22cf6cecd8cbf318df95f38add88cbfc7f786775b47089d1a26451b83d33e","ssdeep":"96:9J4o/vHtcZlHR9FGSA8a32BtT3lh21LZU6KJyaz8qJWDuB:T1vHslHRmSA8y2B93lh21LZV+yazFJz","tlshash":"68c194590da2413141b3516f1b5bfb677263a11772c6e1863dacc3003f1aa5bfab1bd8","size":6134,"data":"","first_seen":"2025-05-23T15:02:37.102812Z","last_seen":"2026-08-11T10:28:42.227822Z","times_seen":3331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/lc-639c490238cde45f631f684e031f0477-lc.min.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7956545a62cbe95e9b0bff92a9b61b65","sha1":"329d9e47b9cca40e46d0c869f8a0e66eaa953ed7","sha256":"fbb3ea125a6fbdacc325cbf763138ed204450124254649efee9c70a6524722ad","sha512":"a7657e5f2d0fe00748c9f7b92dd19ad6d5238d975e0c798ffd2805c60979255264a468c6ba1a398469e2f25aa2603e4d627a52304abf2f3dbd819afb1a0d6d65","ssdeep":"1536:ybA6wDzwXYBjEu81bl15MqWt0nhOuEz+2/5f+Nh8cQBibzd+QfhanKrHldfUN8Dw:rrEY0WpSz2/5fkh8cQBibZ+QfhanKrHO","tlshash":"b853e8c9b282b07202e7a166403f010af33b5999b50e80d8f67dd9d97cb894a5277f7c","size":65766,"data":"","first_seen":"2025-06-27T23:53:39.282935Z","last_seen":"2026-08-11T10:28:42.230739Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/lc-bf921af342fd2c40139671dbf0920a1f-lc.min.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf921af342fd2c40139671dbf0920a1f","sha1":"c3ca18ad7aec35192414a342cf2f88a61fd9ebf5","sha256":"b4fd432b0cd46263e46623622211cd79368f7e267afd963d78f2216480d8e568","sha512":"aecd1cd2369b3a9c3129d75d073f65ffba552a4696faa38c717570298a70f2a7a0cb10ef94e7213e0628c76d6f2a7a3a7a789656a34f13b906375372f2f9f1c0","ssdeep":"768:81CFCetAUWHSfPAV2wC4LESx+VK6Iku3ifyA/gqoyEVlR:xLfPPwC4LEScIj3ifyQgqoBVlR","tlshash":"6ee283c9b5d2f07253eb68b5402f440bf279a814a08ea490e6e5f4d8fc7855ed12bf2d","size":32707,"data":"","first_seen":"2023-10-28T05:14:04Z","last_seen":"2026-08-11T10:28:42.234782Z","times_seen":1977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"promoCTa element not found.","filename":"https://1127bet1127.com/js/poker-top-section.js","line_number":1,"column_number":7986},{"level":"log","text":"Floating Teaser No Found","filename":"https://1127bet1127.com/js/poker.js","line_number":1,"column_number":19922},{"level":"log","text":"No sidebar components found.","filename":"https://1127bet1127.com/js/poker.js","line_number":1,"column_number":13776}]},"http":[{"url":{"schema":"https","addr":"1127bet1127.com/uploads/fortuneOx.webp","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.718Z","timestamp":1786444083718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /uploads/fortuneOx.webp HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:05 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 11 Aug 2026 22:28:05 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:05 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k5nIiZE9C5e6KKVNLd2Sl3XXWTnbO564kWxfz4W2%2FefGYqHnN%2BCTnm6k8oLoZ%2BeIUFnb757nIDbGzKDf6gB2OCsERihqawgYt%2B%2FLR4sNKqz7oEuRnn%2BKMPw274%2BMsao0hHI%3D\"}]}\r\ncf-ray: a2968d233e495695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25884,"size_decoded":26562,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"717670f53cca0c790f7542c8a77d4624","sha1":"7b7aa8b145be8344fe9b0edf690154e078cf95a3","sha256":"ed20044f288b745480a43f7a0a680e7da7df298f3a558cc5094b3092ddf6495b","sha512":"9f300ad55cdb582b733cb68e9696270051ac3d2794393f55471ef9782800e52af37f926e66f12184c50e1d8fa7989559a620bf7838a1345e0abfa77d55c61b39","ssdeep":"384:AUABhLaEvGvo8FCF0O5e1etvdFKGg9Emzwhqcs70C7p7xf50wvpT5ctGblfZz34N:uaE+wCLO5BvTKGAwslbv9DHcN","tlshash":"55c2f1b2e73b1a1e98e4a5b7c016930b7b175dd0fb6082814c32820e8713e5dbd697a6","first_seen":"2026-08-11T10:28:42.203192Z","last_seen":"2026-08-11T10:28:42.203192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1528,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/css/lc-8fbdf4ce96211052d13dbe3c35baf3a9-lc.min.css","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.110Z","timestamp":1786444083110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /css/lc-8fbdf4ce96211052d13dbe3c35baf3a9-lc.min.css HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JyleoW3omPL%2BktPPW1AJchYRHAlJXZu5kRZGskBmHn6hy55hY2SDS9ZxGu3nBimMxm6vJxDrufwC5byl5oClDwUpEPXNBUp7tuRiCIljyeJtLQrgCMaJJGTJPaWIJra4OWo%3D\"}]}\r\ncf-ray: a2968d1f6df65695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17917,"size_decoded":5552,"mime_type":"text/css","magic":"ASCII text, with very long lines (17653), with CRLF line terminators","md5":"8571650ab5d8440e99b1740a9b648eca","sha1":"4d45c47a380397ebf8a1620813fca96ece6636c1","sha256":"9e0e371a63c85441f86ac09d335b2cd697e54cc2a431ad412f8c63d7dc512875","sha512":"9e0c0c1876e6e2f5fa90470fc7e19cf44b60d4c19a23527793b4421d83a28e6302b6981c6fea5cc8917db75e60eafb331df54a49b2cd8e691ad6d278479c10cd","ssdeep":"192:7GFmUJbiKne0JlXZHZ+SMS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Pz+cC:7dUbe0JdZHZ+1nZ24tlWfF4XYz","tlshash":"cd8234a86300282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9136f6a9","first_seen":"2023-11-24T11:59:50Z","last_seen":"2026-08-11T10:28:42.204292Z","times_seen":155,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/Web-Client-Banner-Display-Lead-Web-Client-PC-img-TS-55740-1659442992753_tcm1530-563541.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.133Z","timestamp":1786444083133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/Web-Client-Banner-Display-Lead-Web-Client-PC-img-TS-55740-1659442992753_tcm1530-563541.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndfkXHPkqwuYePbkF9fR%2FXTFWzHw8ntMHgZi4FXQG53BwfZoYsa1foh18%2FULPtsEjfprfU8AUzAzzr0ctfMRQia0PWgAfKNX1lkm4j4wLi4giC3UATt4VHAfuDT1BbWBxAQ%3D\"}]}\r\ncf-ray: a2968d1f9e045695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15651,"size_decoded":16388,"mime_type":"image/png","magic":"PNG image data, 319 x 139, 8-bit colormap, non-interlaced","md5":"ac55b259dd9422f47a14f853cfedd42c","sha1":"ad15dbbb7e270cf1d2bc0c96b2cd6daa407389a2","sha256":"21a1e0fd96d1c325f9e02edb83bc16a16d1e8932654ed8c4b5c6a264543a3aa7","sha512":"aede75759085a09ab184b30124de36ae742a86a85f28d3536de48364eb8c664123190e4ca64678c84fceb9a9f04105f51145d99e59478b65c96ada235df91db4","ssdeep":"384:6XyJtJzoBC10t/pf02/sxEs7W61r4xFInTgjTCwepQ6LW:wyJj8Caxpv0zWenTAT9epQ6C","tlshash":"6c62d08fe5e695737a41167c23e08acb27bb1e98024927ed11f49820eb3774ea035ca5","first_seen":"2025-06-27T23:53:39.328345Z","last_seen":"2026-08-11T10:28:42.205651Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1390,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/1625222489171_tcm1488-524141.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.140Z","timestamp":1786444083140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/1625222489171_tcm1488-524141.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OmssR18gS2ozoYTTZ%2FLtqMgXB0VbdmWve0yVTAo27Dg5CLWAk7kkoSQnDtR%2FOvzRz9%2BrAAgMdCQ60yzgSnsSAcyEG9yJ0b2DH5rO8QwmZA6ASlpHybS3m2WZi%2Bot3yqK24s%3D\"}]}\r\ncf-ray: a2968d1f9e0a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6226,"size_decoded":6967,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"37c4170fd65bf895120eefaf4898e252","sha1":"8110113940397ec7ac23df2331f1dc772013e25e","sha256":"bfcc1f0e9dcce36d31675f6eb7de2ebd709a58ee384c234a7d3c4355df67561d","sha512":"03195f9b3f490916208fc3246a06a0853b9f5ceed01a68770ee6aff7a01926d9806d8a544543784a64d7580c327cb4ec1cc0589a6928f06d1e1b5822103e609e","ssdeep":"192:Ts+AFJIGwva8adRMt+xvwFd2eXtHccAgCAoP:TsfJIvvW4cdcr91Ag6","tlshash":"e9d19e97d679c028eec6081671a192b097ca7952f11bebaccfa3d30e458e43664944a2","first_seen":"2025-06-27T23:53:39.293519Z","last_seen":"2026-08-11T10:28:42.206651Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1413,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/Strip-sloth.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.149Z","timestamp":1786444083149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/Strip-sloth.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FONM3P56m5Lj%2BwacsAG2QS7XVoHuEYhmTP%2BxvqeajLFYjtu%2BiDEeCM42cUA0rQwvXRBHrHiqm2z01XqQe%2FriDtQ3LPZ0AW2LRca6h%2BT1tKbAuu9Pfn4KjUZyPyYvZqe4sk%3D\"}]}\r\ncf-ray: a2968d1fae105695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6139,"size_decoded":6880,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"e843a83d35c088e43c7c35af29c4e9ad","sha1":"53020df0334eb5e39a5a1e21826d275879411408","sha256":"ed56be8937600b11ac9d6639aa999f957e5f195d7c1aa35e250a171cdc9c0705","sha512":"eb9e437e2966357b82d150e65a88eb6557d5ae78f74623b97040cf00c45b9d839f67d7b507b3f04aab4d1c7847309dc2777b5c674f69785ccece64569b82e2df","ssdeep":"96:GBwJkWPLuEHfYn6TBFPXi22AL/2aBtMrG/EmHoGBBGxHS4jcyB5d3:QwuWDuEHO6TBp12E9orUTIGBCH7cU5d3","tlshash":"cfc18ca55f421be4ccd5c42182080d8d4c531ca5a39cf2360faa4c8dbcaeb86a9f0e8c","first_seen":"2025-06-27T23:53:39.299969Z","last_seen":"2026-08-11T10:28:42.207677Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/fonts/888-medium-webfont.woff2","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.660Z","timestamp":1786444083660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /fonts/888-medium-webfont.woff2 HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/css/poker-top-section.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQP1bt98lc99DFk6T59CuLFtHGkhMQbBO2Jz3rJvKECFJIrOBbDujdok0BgJTK1G3f%2BieFJab5aI0UgEySbrMZWxfiRuYK9%2F8o8UksfSFa0KpvRCdHeE%2BWvP7XscgTo3BsE%3D\"}]}\r\ncf-ray: a2968d22de405695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46216,"size_decoded":46889,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 46216, version 1.65","md5":"b1ba561e2c246c1a1221e5a2af02b870","sha1":"9cda07da168235b76d0b4f4837b14182d27901dd","sha256":"3eb456bbd1c25b21db0c0f2524800d312263b8d69bb75bdb77d1235cb80d8cbf","sha512":"cb17c67d5c444372a751c75bf6613946f8a51fd6b40212a726240fab9a2d3821df2fd5bceee91e0d685ae3de52f658acd1688c68d44dabf9f6ea89eb2655d1fc","ssdeep":"768:7BF90xenQtV1MmGSQjOu2+mRpCSRtvpxE+28yetwfmsfb0LkY/pFFP9w1QgicJM8:7l0xenQtrMNjOuPSR5pxE8yMfs0ZP9wn","tlshash":"c0230211b5b3d551f2ff496c1118eaf82f08ba3ddbd2e3548e814356ec249b8887e617","first_seen":"2023-05-14T21:41:14Z","last_seen":"2026-08-11T10:28:42.208804Z","times_seen":108,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/lion-1625222549399_tcm1488-524144.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.139Z","timestamp":1786444083139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/lion-1625222549399_tcm1488-524144.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhWM%2Fu5Y92A7t1ec3icG%2BRtfKJ0pojkeM0uGJk9b3hJg8LDu0i2C%2BR7GBWd47Wjqy1gd5RKmgiEZQ%2BKSTI80HDVYRDuy5RvImAVuVOaVtIEL922GN7rShJP2acaGq5nyzWM%3D\"}]}\r\ncf-ray: a2968d1f9e095695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6779,"size_decoded":7520,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"09d91ca8aa332913442307cb61581546","sha1":"57396f2b06f345e2c26ae78dbdd7784872834dca","sha256":"df670de60b9c231c7afe1254e840e97aafa286b60e286c2c887bb7d73419a75c","sha512":"07a85f73da9c40649a65f4dda5dfd4eaf83bacb812f22a4b1ad4f418445bd0dbdff3aaa8ef3e85bf457cdae1115a54fc43b5ed37dcc1eda5ce1fb8f95809a692","ssdeep":"96:w/w1SywkgZUEoxnKniIkNXDRlTfrQiscdNohUvy8xBqeNdszuiMCWm2Ww8LijXuD:YGfF5D7Hsczo6vyyqEx1m2a+jeZkYxp","tlshash":"36e1bf19691ca59ef3529b7672057b4ee434d2e2c14d099bdc90837cad7d4180a41b03","first_seen":"2025-06-27T23:53:39.303768Z","last_seen":"2026-08-11T10:28:42.209378Z","times_seen":107,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/basic-webp.webp","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.107Z","timestamp":1786444083107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/basic-webp.webp HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWKVps3hZWbRant5vC3RSv1tGVOhb2bmNfERAKObzr7t%2FmRUYRJPujUdzLamZ6JAd%2BV38y1P18F0oTSdj%2B1vnux0jumSriVMkaVQiXUrjzCEV3pieyfAioDuSdh7Q%2BTn0Ik%3D\"}]}\r\ncf-ray: a2968d1f6df55695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41330,"size_decoded":42002,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e408619f01a07ffc4c8eb02d64a192b7","sha1":"7146b55426599b4b1bb9177efbdaf2504308990c","sha256":"1dfb23db3f5c602792a4842bb6fbdec095b4e3243b0dccbd33c975aad4d637c7","sha512":"150210a2eaeea261014a013590044b95a9e62d2c21a40303263f161cee094d6763bbcf011b9d610c25574dcf9920cd5d77ccb348181b028635e33b98312e4cc9","ssdeep":"768:yYytYytYybHJuHM96GqQT92scQugRxh8VrrYhGizjCb:yJJ3HG8JT92sPxRxKYh9Pe","tlshash":"a303e1bdde735672fba6b97499f88b9c02931924dbf0d105a2785b1402c118aef490df","first_seen":"2025-11-03T04:56:47.128022Z","last_seen":"2026-08-11T10:28:42.210366Z","times_seen":105,"resource_available":false,"data":null}},"time_used":1577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1396,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/TS-48578-PokerListing-footer-1626354910662.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.120Z","timestamp":1786444083120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/TS-48578-PokerListing-footer-1626354910662.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bMda%2BONTwmq4Q7hPxrLBLAIVQRDFSXBEuMIL3KnMi1550Vh1AnUsl%2F2%2F0l5l2iYseWeSvnq0hLDWN8lSiEqWHJnmx78JrWi5wSVzTVsjuOWXot3lMf9NRqxBA0FGbptBKo%3D\"}]}\r\ncf-ray: a2968d1f7dfa5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9620,"size_decoded":10120,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"3b32fe9885f3e2023f3934eefbc32c86","sha1":"7eb5bb0f0f411a6a76d91b5c9507772e001c3aaa","sha256":"a0e6775f8bc5dcc67c264b98a11f5984dc15b8db9bd5906d5a950f511ffda16a","sha512":"10a17a95626d66e93d2eb99ecf9ccbbb6d1d45c3c0595e0181c289e574bc2785298af4ad6e083de21051f1bf80f3b1f8911414b9a5d088bcb332748fbec1a624","ssdeep":"192:dg7AenJg0E88nf808Fh2rOIwdafDisO0jY3ObKDhpF+/8bxqj92bcKhc:dg0eJgF88f02byqi2juObKDjUSxqjgVc","tlshash":"4a129d9ec422d95d53888c0245b9c089b53b4cf499d86e27ffb99c2f09f34d1f11a6e2","first_seen":"2025-11-03T04:56:47.130554Z","last_seen":"2026-08-11T10:28:42.211397Z","times_seen":106,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/poker.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.129Z","timestamp":1786444083129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /js/poker.js HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CqhA9aa9O8IuVaGQM5rY4p6Ymw%2BltD2eNMy3MrEmHDAJKCc0y9CXcJK8yE1gtbZxOron8OqFB3hvmT%2Bk67k5IE7EZlkFUGxo4eckx6zCokFkp2kXSmaMcdsSxjmfNtlzid4%3D\"}]}\r\ncf-ray: a2968d1f8e025695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39579,"size_decoded":11225,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39579), with no line terminators","md5":"2f931c1de359969bae27228974dbac81","sha1":"24eb85869fa8c00ad9665ceb1e925c3128a115de","sha256":"44c52f73540fc41f0cf4f33af3041075125a3a8e481787c6228beedd3ae46c04","sha512":"745c7cc441aa1577d0963ef36cb1236a2492e45ba6d32dd1f94bf9be5bb5f1cf1dd367fb7c37f89098e7df92aad2d4057a59fe7fe01be1e381b870dcd4e2f43a","ssdeep":"768:1G99ukvQaaipLUkQ515g5d5+D5f5MJfldQ4pSAUGYiY0kUwhiaU+ASvcaFT59toO:1G99DYaC515g5d585f5MJflrUG/Y0kUC","tlshash":"ac03a774a628253502af55b761bf7bc865b0208aa9424419743ccc892ff9dd712f2ffb","first_seen":"2025-11-03T04:56:47.180321Z","last_seen":"2026-08-11T10:28:42.212301Z","times_seen":103,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/Strip-avatar-owl.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.149Z","timestamp":1786444083149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/Strip-avatar-owl.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVmKQCu2ZK5S3myDyno0ChVowHnxFPObObtogZaCRev6YFyv%2BoUW%2BbRd%2B6qHwwIpFyjM1psd%2BNCGvsDaJ3Z8U9KCoo9TCQnX4htuuP1J0O%2FNK7rUZX5tG8FUgBr0kxzlUIo%3D\"}]}\r\ncf-ray: a2968d1fae0e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6794,"size_decoded":7537,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"41e3efb7a3e6c93c15f4cdfaac159624","sha1":"25ff82eff29ba9cf867ff4333bf21b72f0efaf19","sha256":"efc127bcc609e2dc981246341173ca0ff342f77c643fedab4711176c346c90b4","sha512":"21d8481b4fa2e01155a6ae0690400d86e5cbc77ba484d5d5cb34bf57ff4fea59c913142a7d2c07203766c8bbf83300b09981a2566b7a9df1f686bf5a7cae037a","ssdeep":"192:BiduR5N9/+R7P/tKSXuZZKUYP/MEDbwCfs1:cd+JuznkK/fwCfs1","tlshash":"01e1af383a00d949951269e667b6c3c65ccf997fb504fc72a2e32d892231b7d21c3ee5","first_seen":"2025-06-27T23:53:39.32902Z","last_seen":"2026-08-11T10:28:42.21336Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/uploads/mrTreasuresFortune.webp","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.716Z","timestamp":1786444083716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /uploads/mrTreasuresFortune.webp HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9pGUi0Lx1K%2Flu7nwD70cOLibGID%2BFmyI64i%2FECTT72jTjkbW0%2BJFdTTaVdJe0VswVCrMGMtjEVhvXeqn25pEWQfdGhdQ8DttWDcioHSDxYWIm6Apt89GDp%2F53VtZagBBsg%3D\"}]}\r\ncf-ray: a2968d233e475695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27700,"size_decoded":28374,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"122ba4c17a18da6fb3126b8b885795d9","sha1":"7a299d3e065c65040feda9395bc44b508e29e30c","sha256":"865ca5dbb711cbd8e259e3309e9c61ad43acc3cce93fb064a3ace146ef21d954","sha512":"80dd7e29958d16c3aca35de96fa28724eae11251f0fe88fda141b5e9c035b576b6ad4f22943126ddb0105a4e87180fd45173f6618246df13cdd5572544a5f144","ssdeep":"768:i5HbfOokb6pZtLhOLPBCrXgOFUAMygMHmH+H8oVZYk9uzJ8h5Q:ipbfsCZCPBWXg2mSHW+cMZvmJ8jQ","tlshash":"ebc2e08a9d3c47e972681d011eb44ad61d5d8f327e176ad77b94c08087fe10dbaca48e","first_seen":"2026-08-11T10:28:42.214485Z","last_seen":"2026-08-11T10:28:42.214485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/mobile-help.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.093Z","timestamp":1786444083093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/mobile-help.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9lm9AcuYmC8iSiaSu8X7mebeqG5bT2DaHeF7r%2BhESfIwlyGjRtvIhpnptw1%2FW7s9T9RzyfQGyTJUqVAKhZRXi7QJww089aCtBeOjRXfyGlNj8lTGxFqJX5ztG9S8zAR54o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2968d1f5df05695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 453\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":453,"size_decoded":1163,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"5ab6b8ec48077cc92be83c6edf336409","sha1":"ab708810317eb0d73a34adc5a672259405d1d7a1","sha256":"86772fabecfa13899a904ddb8b25207cfaa7282946390e67ae1959e0b3e8ea8d","sha512":"4f7d3060556b643b35565b272cda3c36f0465252a21d13c105525a51847fd9de412f848bdfe2be789f7c737e13e17dbfeca84ead999563f3dfbdf8fac94d470d","ssdeep":"","tlshash":"b1f02bd157344057c77d97972f244062bcf25e9479b201df71a694ec57d0114d498147","first_seen":"2025-06-27T23:53:39.285551Z","last_seen":"2026-08-11T10:28:42.215504Z","times_seen":107,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/Strip-frog.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.143Z","timestamp":1786444083143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/Strip-frog.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2ynGkew7jwvgS2770vDFrBDOxvOwNRNLkqfc4yhobZVm1%2BkWRBlOa2RcOyflhWPndSw7N0r5iFRAPmSXqlwcTwI0zpcswCwcQ2y2qg31%2B9iuaS1Wkjhe%2BUkLtGSUXZwf4c%3D\"}]}\r\ncf-ray: a2968d1fae0c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5576,"size_decoded":6315,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"1878e271e9567429f609e6e34077151b","sha1":"a6560b7dd88e4445ed90bee9bae80d7b9986d6f3","sha256":"bf6d909499974d077710f804eef51229ae7e32821fe5cc7f850d01965b1d321f","sha512":"6661ef2be2f81738c9d80a317b6b68475d321968cb91cf864c89887be5dcc339d90f21b652b5faeb0ac16e7421c239bb8a0639668d4218d7b226d84d20b828e4","ssdeep":"96:x1T2GMMGARY97pGZKu1sPM8sRneX6y1/OZyeZNdTVZpI+4SRvz+na0J8:x1aGMMYpKYMHo6yMweZNdJnIzSxz+w","tlshash":"ebb1ae716dbc8951e23b5b605a24b3ef3aae0326be309897089dcde4c7ca10114e23e4","first_seen":"2025-06-27T23:53:39.305154Z","last_seen":"2026-08-11T10:28:42.216432Z","times_seen":107,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/fonts/888-bold-webfont.woff2","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.663Z","timestamp":1786444083663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /fonts/888-bold-webfont.woff2 HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/css/poker-top-section.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3N9IYEjyxkXoQUFMbadZpGBwOca7bJ2NOPHz%2ByG3mGfGJq0frLu34M8YvVQbdhHgcrcPEfzfGYUo62AWl6BtODWTwjaAlMPpZkicOBQfKKaGQGWXfwJny0QQQrYdQU6thQg%3D\"}]}\r\ncf-ray: a2968d22ee435695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47088,"size_decoded":47757,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 47088, version 1.65","md5":"6db3cedcf070f4c15880db838bdd920b","sha1":"b54a542467d5dd26e06ae72b525e7112c6e92994","sha256":"2247fd23f5d0a90b569d5ba51de879df7bc22e9c2d36041a10e523af85a6ac96","sha512":"063a8d0a20d93bf40666a6e1347e1e9b5aae6c132bb9066cb878f4c903d7b201a2f236490eeae2b9b4632821e41eb57494015834bfa7a57f0b050f29418bafaf","ssdeep":"768:LKOrT3wAMaYWnuBSlK75h64gslRC93ozfHaCLIsUE1VYdvhS+KXSdk1cHIFtBg2U:LZANaYW9liS4XzCosvhSFX0ke4tqASeC","tlshash":"9423f1c2af627c0241145ed06bf93b60b4644eede53635a36d3682c04e17fb5ef19636","first_seen":"2025-06-27T23:53:39.314008Z","last_seen":"2026-08-11T10:28:42.217312Z","times_seen":106,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/logo-blue.webp","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.088Z","timestamp":1786444083088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/logo-blue.webp HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2mNDg3GvBYOd7HmoSnV5c04wq%2Bt%2Bg5l%2FJsfzcGgEqw91BDUMCfN%2BLLxWvfWoZcEE2Hg3mvLc8m7hia1q%2F%2BTnZ%2FM4vd9HIqNinOCi9LjIJ%2FlLKu9rGoDDHyWFvIoRKcf8Zs%3D\"}]}\r\ncf-ray: a2968d1f4dee5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22572,"size_decoded":23252,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"93b24951541cef3e62a615d404e94ed3","sha1":"328d81d6a032ac3078bad03d03f09fd7ab2b19b9","sha256":"f44616a87f7f56623711561cc0344f33fae11c3428e0767c97115dd4e6388809","sha512":"6c453337ff7baa06b410ca208a82aaa3ab0dfa4ead883a65ae10f694e0634eed15c7e8839dba1dd7e5b6e82bb18a7f71d4dc85ef86048f45ad92b6713bf66d6c","ssdeep":"384:xcq/OMhJxfnok7R8BoHxUH6bI/O+v7BaRQJXgLpWgqoL73qDd:xcaJRntF8GHxcd/OeBaagLAgdXqDd","tlshash":"c6a2e125d00de77dcd862baabcb64910ea428af92ec9f784dc70485b745b0647b0c779","first_seen":"2026-08-11T10:28:42.218297Z","last_seen":"2026-08-11T10:28:42.218297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1675,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/mobile-menu-tournaments.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.099Z","timestamp":1786444083099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/mobile-menu-tournaments.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bcVejhxWn2wC9ycBDTHmgKZosy%2FYwcZCsuOKQSwcMcHdUn00dnW%2FQyUlRfrROZflL%2BGvSGkdlSB5r%2Fo39w9SkswxbAtmdLA8z3JzrHiYoq%2BZzXrX5I2c56Jv6msXi4JJWG4%3D\"}]}\r\ncf-ray: a2968d1f5df35695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5436,"size_decoded":6179,"mime_type":"image/png","magic":"PNG image data, 61 x 80, 8-bit/color RGBA, non-interlaced","md5":"30377d7b06287111447fd49d43b9588a","sha1":"c6b52d7be444bbe4b5fa1aa4b65a13094373905c","sha256":"85ca39293a1d9daec508f73a52d66591b3a1324e35e23fc3558729f9afa10c44","sha512":"c622aa5682c7510bacdc59f27d5ae2d10fc1fe73096856751ff433dc2081aec7585a6f0142a6b2e254fe6f3b6c88ca399a544ff89f2bc58035e8b8ff06c9ddd8","ssdeep":"96:zXnzz7F1X9NcX5GXr4EuHbiLlZDzAswDdWJTXMFgehzL+0ssbAq/:zXnz11ywhgOJZDzAsc4g2eNHbp","tlshash":"bdb18efa9994228aee35843c40dcf5a8b4e866c50203fca523b0fb9949559561e337ce","first_seen":"2025-06-27T23:53:39.290136Z","last_seen":"2026-08-11T10:28:42.219678Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/poker-vendors.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.131Z","timestamp":1786444083131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /js/poker-vendors.js HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ag9jNpNaGI%2B%2Bs224ZMdedOEnZBh1QlPN1U6BSyuZe9riNUX7dMN32PMWpgHOY5NtMfmYA7ZISljY3RShGzvRQ1hh3VP2TOQsJGBJhjJAo%2FU5AaNQEyJifMlbvDjHJnuLQgQ%3D\"}]}\r\ncf-ray: a2968d1f8e035695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77560,"size_decoded":23215,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"517719426acbb3e14501952edf38e17c","sha1":"d3096915ed40d524474600d16613d779153f0e1a","sha256":"59cde6059ddcbfd0e16a1aa9f3881ac98a4ec69eec10636568908a4c83804fe8","sha512":"a84d202714125092722211ded8eccc4ecdd6b2fe3aaf9c3028a4888deb8349950cfe81be4d6e187426b22fa32bc1661c5393262e5126b4f9725f42930691098b","ssdeep":"1536:nbQURn5fGBo9yuNBKQBcEofCpnMoolgux1bkldIUynz+:mZH77VXbi","tlshash":"cd730999b321b1a552e7169793a5c501a3b50844b409d4e8b1bd8cab2c3ed8c13feffd","first_seen":"2025-06-27T23:53:39.320593Z","last_seen":"2026-08-11T10:28:42.2206Z","times_seen":107,"resource_available":true,"data":null}},"time_used":1596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1414,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/ReviewStrip-frog.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.150Z","timestamp":1786444083150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/ReviewStrip-frog.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VYn3O0xFEqNiEB9rw3FtDF2VL9sbo%2FujxG08093VWHyRlkxueMbKlRw4Zo4YjkxArxvkwsA7PrCu7a2IN3w8dJTNN4TY%2FGSdQvn2eJfPCHuzkI0cpA8nB7C17cCLgsvvUc%3D\"}]}\r\ncf-ray: a2968d1fae0f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5576,"size_decoded":6313,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"1878e271e9567429f609e6e34077151b","sha1":"a6560b7dd88e4445ed90bee9bae80d7b9986d6f3","sha256":"bf6d909499974d077710f804eef51229ae7e32821fe5cc7f850d01965b1d321f","sha512":"6661ef2be2f81738c9d80a317b6b68475d321968cb91cf864c89887be5dcc339d90f21b652b5faeb0ac16e7421c239bb8a0639668d4218d7b226d84d20b828e4","ssdeep":"96:x1T2GMMGARY97pGZKu1sPM8sRneX6y1/OZyeZNdTVZpI+4SRvz+na0J8:x1aGMMYpKYMHo6yMweZNdJnIzSxz+w","tlshash":"ebb1ae716dbc8951e23b5b605a24b3ef3aae0326be309897089dcde4c7ca10114e23e4","first_seen":"2025-06-27T23:53:39.305154Z","last_seen":"2026-08-11T10:28:42.216432Z","times_seen":107,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/css/poker-top-section.css","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.082Z","timestamp":1786444083082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /css/poker-top-section.css HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OyzPOeS3uzPze8hr48mEdSptEXC7ElQPQh5SpmCMPDnnh6Dd0aK8udnx0xAz9r3XUMu2ayGJeiBOnDFW5lJsOSdz3rI2gW%2BUW9ra8kUaWA3DcyiSuFooX8ZhoYGJm7V8A28%3D\"}]}\r\ncf-ray: a2968d1f4ded5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130361,"size_decoded":20010,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"4d8591a2707f9fc94a6b9140aeb2c40b","sha1":"c0a245251d99193eeedb16da6c14805ef4502b50","sha256":"63f31d1e29ffe8f2df9240ee0a544386759c20a735555b84df82985cc5ba2ec5","sha512":"57c8248bd0b83e5b36c49461a6a01c27f603942712159bf08de093d0e9c3837376065279b99abf90da733422722f6bd6964d0a06cd91a0f7404b24a1b6b91faf","ssdeep":"3072:NsupVbA9KwuV8KYlT/nmPVbOPVbLVzBRqYmhFv5duMyDFv5ouMyP:Ns7qV8KYlT/nf","tlshash":"1fd3b62a1e063018a1bb4b3ef5b07e9d576db826cb9391def6574905cfcb3d20532988","first_seen":"2025-11-03T04:56:47.138771Z","last_seen":"2026-08-11T10:28:42.221582Z","times_seen":106,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/poker-top-section.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.127Z","timestamp":1786444083127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /js/poker-top-section.js HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mT%2BLZJnCci%2FptIGyXyhiJcOYC7CBIj97fj1H2nk331pMUCjub890ZhqHiiJfwAxaf4Iu%2FOPGjKlxt7bZkqFKgKbMI9sajCep4im56QMiJgsLJKhcnV96%2FUc0q2SccSzX%2BWs%3D\"}]}\r\ncf-ray: a2968d1f8e015695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8897,"size_decoded":3409,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8897), with no line terminators","md5":"9904835f1ad42ad28385cca7b1e8d36f","sha1":"c1e62f8f6fb996f09d55bdfd837ff19d0b409709","sha256":"3403e53ad900915a76c2a999c23091b5d0b10c1afa8d4656fe9cf5d8dabded23","sha512":"e90321c456b21b700ad58f0ba516b1b912cd3d9273eefa37dabbbb7c3d5a8f27af694567bc116a330b1c49e5e98047a9c7ceb0b4d352493ad5c6fc6ed3396412","ssdeep":"192:xRH39ru9DMUMDuaqumPNSK+qc2ah1y/JpewFbnSEP5DCjHzIEAXSN4KEO:1IMaaDKYQ/JdFbnSEP5k5sE4KEO","tlshash":"340265686714747301bf15b6d2db7bdab37660cae50604419528cccd2db58c782b2afb","first_seen":"2025-06-27T23:53:39.276838Z","last_seen":"2026-08-11T10:28:42.222464Z","times_seen":107,"resource_available":true,"data":null}},"time_used":1430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/Strip-bulldog.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.147Z","timestamp":1786444083147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/Strip-bulldog.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXtxqbZs1gisoTbsIqmVGQ7iJ%2FuLr1LWVZ6n6Zda%2FZrkDNcFSv7LB7v%2BnQaPrZCyCF%2FSdXTQ37q%2BOhC0sRYPVPwcpiCTCyME5cjuPmZ84q7WP1U0m8RqbV2zsHQhFCl47ec%3D\"}]}\r\ncf-ray: a2968d1fae0d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6520,"size_decoded":7263,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"1658bb0997e88d18b97df8d8810d6a8a","sha1":"5a5c98372898fee6d265abc6f672a546f2c05b00","sha256":"572e47b87d28d4cac26fd6186c9ba12f52b6f215dec0ef60057c1cdb6ec8d111","sha512":"7cef7d49c3adc5a02b3ac64a7ac487bc7dbfdbc057545f8a73957f67ab2a644848a1535640ddcda6aec6d8a030e3d4939c707d0b43428ffb5afb9ffda2177365","ssdeep":"192:kBJkO4BzfDmDP6SHBUA8jtVd0jbbtisiEc2XK:MZSLkP6eAcFiEcQK","tlshash":"9dd1ae7d5d82115ec60813b207602e1afac68a434c73dfb2324ef559e25770e4aba6d4","first_seen":"2025-06-27T23:53:39.307865Z","last_seen":"2026-08-11T10:28:42.223926Z","times_seen":107,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fengge5.com/83.gif","fqdn":"fengge5.com","domain":"fengge5.com","tld":"com"},"ip":{"addr":"172.67.156.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.152Z","timestamp":1786444083152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f2e8e82d.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 14:17:17 GMT","end":"Wed, 07 Oct 2026 15:17:11 GMT"},"fingerprint":{"sha1":"9A:13:9B:0A:E0:2D:AE:9D:F3:88:A2:D7:60:C0:D2:6D:9F:C3:0F:61","sha256":"EC:78:E3:41:AF:A8:87:AC:DC:F7:80:29:D5:CE:D9:1E:2D:1F:26:02:EC:77:19:47:76:CE:6B:8F:7C:6F:58:BB"}}},"request":{"raw":"GET /83.gif HTTP/1.1\r\nHost: fengge5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 312156\r\naccept-ranges: bytes\r\netag: \"cd6903c594e7f7f9529a5b57eded87bc\"\r\nlast-modified: Tue, 11 Nov 2025 11:32:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FOs%2F4zAh37bGd7Mr0KVZjfLrlzLegk0N26YLv4XKyxmor2FvCx0tGnV3sebikX2G6XO8x6%2FdJk8kYa%2B2Fpzuji57wdBmgkRFKsxWa7niPcVpZUmW1GY%2BMYwCe68QyA%3D%3D\"}]}\r\ncf-ray: a2968d1ff9f4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312156,"size_decoded":312844,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 100","md5":"cd6903c594e7f7f9529a5b57eded87bc","sha1":"732a89597cba4fdc5afdb58b8f39327beb685b46","sha256":"57d8647625b3fb5e228b0784610d1c789265d0ad9497daf0e48cf0410767a872","sha512":"bc838cdfd5de96203cb68003f1e41755677f0809a74452e5fa22714473e983bc2ea264d40eb3355dcd0a905241fbe1dbda5aec77735e54448becbea78ffed805","ssdeep":"6144:4raM3sFR+DnwOK/pbWPbix9zfsKGgnwOK/pbWPbix9zfsKGgnwOK/pbWPm:vFRowO+dybix97sKGgwO+dybix97sKGF","tlshash":"e46412c31f2c51e36be905aec4d304aee781369573a52b8bd8169c199bb3132d60e1df","first_seen":"2025-11-21T09:34:50.305399Z","last_seen":"2026-08-11T10:28:42.225051Z","times_seen":100,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":32,"connect":8,"send":0,"wait":198,"receive":5,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/arrow-big-white-top.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.697Z","timestamp":1786444083697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/arrow-big-white-top.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/css/poker-top-section.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxUgILQJmCgJntKx2sD7jZx90DYZQPa9c0ULIgoR184ITm1kMzkPdexiNCwUIzPxEcvR%2B5H%2B4OOvHbgq7k%2BjUdBq4ETLvT6l4uK%2ByZLLISwmkD%2FvgT5EmHozK6ObmCS0KkQ%3D\"}]}\r\ncf-ray: a2968d231e455695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2986,"size_decoded":3729,"mime_type":"image/png","magic":"PNG image data, 30 x 13, 8-bit/color RGBA, non-interlaced","md5":"b6dd7d5a719a76072c34c0f3b1fb64af","sha1":"b9cf54fe1b0118e5c7e7b25df859382df93a7240","sha256":"c25a45f5840e4ff79878f3970fdd8aefb30775df940e6a940e0335c1398745eb","sha512":"a9fbae3407b465db071fb0873c475a58da3b02ae167a3bfedce0f747bb8d36f578e779bbcf95a8d388d3d6988f4e550c8ad6213fae7a4cc8616dfb551d1d23cd","ssdeep":"","tlshash":"64514d896448445e100b47ed35bbee428537fa94535d1e0cd9fd820f8620d913db576a","first_seen":"2025-06-27T23:53:39.319826Z","last_seen":"2026-08-11T10:28:42.225625Z","times_seen":107,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/fonts/888-ultra-webfont.woff2","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.662Z","timestamp":1786444083662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /fonts/888-ultra-webfont.woff2 HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/css/poker-top-section.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2B2yO%2FlEvr8SkvHiMPGbin9dz0QmerHxATchICsIsFuosXCqsZjaFFybNPbv8qQDqFzAnsesWwmSqII0whZPWYjNn0gNlGlfwQaP9G0vChnivzgne0mVnl%2FZy%2FmCasxm%2FDY%3D\"}]}\r\ncf-ray: a2968d22ee425695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45384,"size_decoded":46061,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 45384, version 1.65","md5":"dee9397ec0881599c9a45256d41a49c9","sha1":"679560cfe7049263657e9df859b7d90f004ed238","sha256":"e21521032889336cd24de1e03737759ce8e1ffaab94739fcb8fe2a080282219a","sha512":"19729d61288fb78688944db00a054301b83f6dd4fb6a44e02d534c049054eec22d03e7716bd9de0032297c2a37ba8ccd8192a501a9cfcba7b6052963dbee3487","ssdeep":"768:mtD8JKluPNAev9UMZztS5KA+x1Qe1T5KpVC74rDEjwhEyS6RCvEc/d2sK5TfS:kD8JKoWev9xZzw5KA+x1VbwVSuE8hEyW","tlshash":"b013f1e89e2a728ecbc36fb644f1125e5b9e883436a0df017414f452a58b7d1037af66","first_seen":"2023-05-14T21:41:14Z","last_seen":"2026-08-11T10:28:42.226593Z","times_seen":107,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":347,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/rum-standalone.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:02.893Z","timestamp":1786444082893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /js/rum-standalone.js HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSRC%2FtDZ%2FkSYcjfgEcYpIZ5gKUaK2affcL%2BPxl14MrWNyzcUClPml%2FhtGtvFM%2F6lnr9Z%2Fy0XwYE11qkc01fHTVoO3lpVGKo9VG%2Fkliwpi%2BaF%2BnpHTATURtMqU0VPHGNN1kc%3D\"}]}\r\ncf-ray: a2968d1e1dd95695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6134,"size_decoded":2980,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5e8251b321087f7638883fb4d5793722","sha1":"1e54932bfa11be05349c57b74370cc4d2fb43983","sha256":"7405ac8135bc57a96fb585cb03c7c950476620ca0db911d7f4e3848f6f499c20","sha512":"c1fda021959b10d95e49d40913ea356ba58b244efe2ac589a3080798da9fddd003c22cf6cecd8cbf318df95f38add88cbfc7f786775b47089d1a26451b83d33e","ssdeep":"96:9J4o/vHtcZlHR9FGSA8a32BtT3lh21LZU6KJyaz8qJWDuB:T1vHslHRmSA8y2B93lh21LZV+yazFJz","tlshash":"68c194590da2413141b3516f1b5bfb677263a11772c6e1863dacc3003f1aa5bfab1bd8","first_seen":"2025-05-23T15:02:37.102812Z","last_seen":"2026-08-11T10:28:42.227822Z","times_seen":3331,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/lc-1e0136bad0acfb78be509234578e44f9-lc.min.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:02.897Z","timestamp":1786444082897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /js/lc-1e0136bad0acfb78be509234578e44f9-lc.min.js HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLTyigSO6TaQvy7jZQ3Ir0JUA8v%2F2BS5GoAMqWe4CPrWef2TVsCzPvM59wuTMuKPHXbMc3k5WK95%2FGm4q0K3zHOJihffd%2BuCuYYd5exPD65Q5a0p9CnRVZzj7ggR%2B8QbMlk%3D\"}]}\r\ncf-ray: a2968d1e1de45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2769,"size_decoded":1710,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (544)","md5":"1e0136bad0acfb78be509234578e44f9","sha1":"c93ecef079d9a3d453d5d62adcc0d8cfa96615b9","sha256":"e30fce7f3a4fd232adcd6fba94949e18bd188ae9750c0a1bd5f53b6d5c496848","sha512":"32aafe0dcbe41c88699970aa8858ff788e7ff28ac0b76018c03b95c867abf6ca1957f3157747b86843cfb8b19678dfc0db241e3be6cd7740b22990d8559101a4","ssdeep":"","tlshash":"1c51cbf076664c7400cf176a177f6acf72f9b866c9c740619813f8e81abae843591e85","first_seen":"2024-04-26T05:38:39Z","last_seen":"2026-08-11T10:28:42.22835Z","times_seen":1949,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/desktop-help.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.092Z","timestamp":1786444083092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/desktop-help.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icSEvTrgkpmZFTkdJ9h52%2BJoMGDuA2gFkbV2RaI0ITMugsDDPYWadJTYN4IgD%2BAsdBQ72Y3igjUELlVpXPZpFKvEbQns6CXo5t7pNlIiQdfHS%2F2tKMogM8dzv3aoOe%2FotEk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2968d1f5def5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 669\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":669,"size_decoded":1383,"mime_type":"image/png","magic":"PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced","md5":"de663b15d4b2f5ba1136eb5d97195d09","sha1":"89ad513bc4483efc995fca93cc1d502e69ee58d7","sha256":"036b2f0199cdccbc273a1952f19a773f0437b4c34410e7e33f57b8dd0e6727f3","sha512":"5659cd791452453988bc9fb80f636e9f19fdd88fd0153b8b123e6a3b1db245f0d546f6b0665f5aeeb1fe24e9916f300bc052e73374474cfc8cd8060296c37c18","ssdeep":"","tlshash":"fd0183f7c758a82ec3793d73ec0c8450ed73400bb61e1bd4a842b8342f6660549926a2","first_seen":"2025-06-27T23:53:39.292682Z","last_seen":"2026-08-11T10:28:42.228843Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/mobile-menu-promotion.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.100Z","timestamp":1786444083100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/mobile-menu-promotion.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FC%2BwBTxX7WmbnxyuHDx9noAnejyQ0okHj3FRV3cMRI620SD8fePDLhJtNyI2JqPZizR5pc9JKfrHEGZ6z1Pc9J4lIIoKBdWM%2F3RNiIBtJhB2iou2dpg6roGytJZD434DBX8%3D\"}]}\r\ncf-ray: a2968d1f5df45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6455,"size_decoded":7192,"mime_type":"image/png","magic":"PNG image data, 86 x 85, 8-bit/color RGBA, non-interlaced","md5":"047b40531695b12fca3211fa3df8bffc","sha1":"f6620646b51f70ce795798ccd8c89e2b5c03caff","sha256":"b8ba6415b4c4af57fd1fc837c65dbc77b5f0af305870e31d19af461844cf0adb","sha512":"46c764e6555578b55c61933af2d6ca543836f39dc4839412f5a6232c5739e69e92c754ffa2a8a3c5f0294e5fac2c41858f85d20c96df77e1e26b6f32ec42a9f8","ssdeep":"96:NUpBVzOIIfh4n94dmZqPMv8W+E6FMfK3B8jKYzbTV0umAXmtUvvGHN1S:ufVq7ha4dmZ9b96FVB8jK0aXA2JHN1S","tlshash":"76d19f9da4bc4b94f6f9b50412b41839fa67e8705f8629ef6c345434492f410a97cf7c","first_seen":"2025-06-27T23:53:39.330366Z","last_seen":"2026-08-11T10:28:42.229834Z","times_seen":106,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/lc-639c490238cde45f631f684e031f0477-lc.min.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.124Z","timestamp":1786444083124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /js/lc-639c490238cde45f631f684e031f0477-lc.min.js HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAoEy3yLkxdUqrfsAUEm48e%2Fo1Fakc%2Fp3cybUcE3guhbmM6sxp5VWCvxw0IXqEssHxd1JtPYMXr3CfPMz2zx%2FdzamCrdgrdsUhtb2HvaQqp7Um2vkACoOydIIiV8EytvmmY%3D\"}]}\r\ncf-ray: a2968d1f8dfe5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65767,"size_decoded":22121,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65505), with no line terminators","md5":"7956545a62cbe95e9b0bff92a9b61b65","sha1":"329d9e47b9cca40e46d0c869f8a0e66eaa953ed7","sha256":"fbb3ea125a6fbdacc325cbf763138ed204450124254649efee9c70a6524722ad","sha512":"a7657e5f2d0fe00748c9f7b92dd19ad6d5238d975e0c798ffd2805c60979255264a468c6ba1a398469e2f25aa2603e4d627a52304abf2f3dbd819afb1a0d6d65","ssdeep":"1536:ybA6wDzwXYBjEu81bl15MqWt0nhOuEz+2/5f+Nh8cQBibzd+QfhanKrHldfUN8Dw:rrEY0WpSz2/5fkh8cQBibZ+QfhanKrHO","tlshash":"b853e8c9b282b07202e7a166403f010af33b5999b50e80d8f67dd9d97cb894a5277f7c","first_seen":"2025-06-27T23:53:39.282935Z","last_seen":"2026-08-11T10:28:42.230739Z","times_seen":106,"resource_available":true,"data":null}},"time_used":1589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1418,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qio111.com/6.gif","fqdn":"qio111.com","domain":"qio111.com","tld":"com"},"ip":{"addr":"104.21.83.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.134Z","timestamp":1786444083134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4d6d3c6e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 13:58:49 GMT","end":"Wed, 30 Sep 2026 14:58:41 GMT"},"fingerprint":{"sha1":"E6:3E:C3:36:1F:78:F0:9E:79:80:83:55:72:63:2B:50:C2:B8:BB:DE","sha256":"5F:E7:5D:09:1C:97:28:30:71:A3:B1:60:30:39:9F:0E:F7:6D:50:F7:40:B3:60:71:60:00:36:5E:73:1E:80:3C"}}},"request":{"raw":"GET /6.gif HTTP/1.1\r\nHost: qio111.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 118412\r\naccept-ranges: bytes\r\netag: \"f1c0cee2b15a7c3ba519b38642da5092\"\r\nlast-modified: Thu, 06 Nov 2025 14:56:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqfYvIQqrlcwOoV6spsTXag4AC%2BwouJYflHZSYdKfOauQ2nGwCLslB1S88A8ATPVrWw8CeTnZysyrlcpKOQlevBW1iir42pQHbfrNfr8bgBobTuRMzzUoEbqMSBN\"}]}\r\ncf-ray: a2968d1faad156bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118412,"size_decoded":119084,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 60","md5":"f1c0cee2b15a7c3ba519b38642da5092","sha1":"36ab6066e35c0115749c0297bd72c9e05f0126e2","sha256":"ca1d36bc0657841a90980876559a9119fbb9ba858c0ed156aedd13d628eb5c00","sha512":"141e0bf03cebf88d490c17696b6c21e3083f63b44e1db0d2a13281781148e8bc635ff0549e48500627ec03c4d66bffa4ab61c8e32da091a89d7ed7d7b26a58f7","ssdeep":"3072:NpDZc0ohO5DyX5UsaMS+fdgJxPv29os5yKQPLY3g4:/q7OVWEYgvPjs5yLPLYw4","tlshash":"15c312508ce0af1a5f57a72c2691d57d7fcdbf016ea2e788d892f79260064c04b2a276","first_seen":"2025-11-07T11:52:11.817905Z","last_seen":"2026-08-11T10:28:42.232038Z","times_seen":181,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":279,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/1625222447894_tcm1488-524139.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.136Z","timestamp":1786444083136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/1625222447894_tcm1488-524139.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qZQyx0i3gVAYZ9thG5dTVeeKaDMfOI%2BAbtakU8Yqn%2FilCzZ7Kc7sd06zeiLGvPVMQVlYODoneHEU1S03sJUXgzeYIa240zkj5ExmqjA7rjiWP7iNe4JeRKIB0GcLpK5KVw%3D\"}]}\r\ncf-ray: a2968d1f9e085695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":6043,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"55639bf0f8c48f49c9577ef60bb18187","sha1":"6ca13a488f6dc96e956ce01eb3b34caf3575ff11","sha256":"c53c7d0b9950e707321e36d7b20950c48a98cea5e687d6d49e6efa308dbc5726","sha512":"ece758164201713ce8e3abb91f9a5b1962e5268567302e1766113bb45938a07fce67cc05adce93f8cb26953b1cd1cf8fb2bc5161b07e0e9839dff2b316c2bced","ssdeep":"96:JN2IG58yZ0FwoCH5efGwn1IUPOi4vfrQSSlJihRLVe1C+:JNCZSt45uGwyUWzvfrQhJihRLVGC+","tlshash":"29b17da9422b2dcc46b695e0af1fee2a6eb7c01581a51f29004a028def517f9f660903","first_seen":"2025-06-27T23:53:39.332606Z","last_seen":"2026-08-11T10:28:42.2329Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/Strip-pilot.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.142Z","timestamp":1786444083142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/Strip-pilot.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITgS9nZ%2BMbkp5iD95HlcUHfJ1U4Y%2FrK1g0Lxo9oQeTbSGE%2Bryf2%2F6IDFLa8P4OnQ1dazLkwNNrskLcyhzc2aimUOG7H8eEJ0L0flPXB3R7ShJ%2Fhsq4Y51w4iFZEM2HzCPjQ%3D\"}]}\r\ncf-ray: a2968d1fae0b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5041,"size_decoded":5784,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"669f6726908bd46c86c8764dda09d0ab","sha1":"a180c210bfdd471e9a9c15614828389b862ac982","sha256":"ff4eada1d56c27b75894a19cfeee9b3001dfedbc9ba1f687e79a38c5965043b2","sha512":"a9f14fae46da6f6bed330742a8071a3d075f8f699e3d6a2eb50f19c2a73a7fe35b44332375b8973f01b013bf4481097f53a19ce5e99c275d9ecf05e3e9c7c5fe","ssdeep":"96:0R8fyb8GPI7Q+N0LdsqcQ1UZkinbet1Vz02k9OOesc3w44mMw8:GRb5PQpqcQWZkpVgrbc3wTo8","tlshash":"cca18f880bca00358f65d072c3c41288d41574d7ea9f1137979ef4f45a34bb490db19f","first_seen":"2025-06-27T23:53:39.29076Z","last_seen":"2026-08-11T10:28:42.23377Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/js/lc-bf921af342fd2c40139671dbf0920a1f-lc.min.js","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:02.899Z","timestamp":1786444082899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /js/lc-bf921af342fd2c40139671dbf0920a1f-lc.min.js HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZi7Q4Be8Esue984cWVoJS5dV7Vuk2ZD9mrBcIWIvVY3qI6J7RHXhwb%2BWbZDNpoMsWkJlPFHNHLgbv%2FqA68NZdk8SgNtozU6xLsAvnVKwDLk3pgFvRA7m4jbHajBBTOyo8Y%3D\"}]}\r\ncf-ray: a2968d1e1de55695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32707,"size_decoded":12089,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (565)","md5":"bf921af342fd2c40139671dbf0920a1f","sha1":"c3ca18ad7aec35192414a342cf2f88a61fd9ebf5","sha256":"b4fd432b0cd46263e46623622211cd79368f7e267afd963d78f2216480d8e568","sha512":"aecd1cd2369b3a9c3129d75d073f65ffba552a4696faa38c717570298a70f2a7a0cb10ef94e7213e0628c76d6f2a7a3a7a789656a34f13b906375372f2f9f1c0","ssdeep":"768:81CFCetAUWHSfPAV2wC4LESx+VK6Iku3ifyA/gqoyEVlR:xLfPPwC4LEScIj3ifyQgqoBVlR","tlshash":"6ee283c9b5d2f07253eb68b5402f440bf279a814a08ea490e6e5f4d8fc7855ed12bf2d","first_seen":"2023-10-28T05:14:04Z","last_seen":"2026-08-11T10:28:42.234782Z","times_seen":1977,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/mobile-menu-home.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.095Z","timestamp":1786444083095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/mobile-menu-home.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azXYaXvQ5mVvr4IrLNNhn66W2HxnO2owuLE43msXEGQtWSEKDs%2BalvLEAfgbH1xpROJzFnr3KtBMyNA2i8mb2jUHVJOJpZX2g8ONGJMHfkrAWVwI1e6bM5iSenRUQZQfJmk%3D\"}]}\r\ncf-ray: a2968d1f5df15695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3807,"size_decoded":4542,"mime_type":"image/png","magic":"PNG image data, 82 x 82, 8-bit/color RGBA, non-interlaced","md5":"154881ce8b88b377bedd739ec3baaac3","sha1":"611451426fa67615d35dd175ff336c411887fc86","sha256":"f61eee3e3f314c1a499403e9edc14b8b0d054cfbba403e478dea2c22cf53a3bb","sha512":"bbe60ffdcba1d6e45d4bd3d32400a9a5205683afe541f790d0176816def27c058423b0b2cd904796ae93e95b92693630da6dd925a517f65628dd6e69dce3acf7","ssdeep":"","tlshash":"05715e6c501734de15c4433791cb26ec695d31fda9753218047f94db776369a5053f0d","first_seen":"2025-06-27T23:53:39.281604Z","last_seen":"2026-08-11T10:28:42.235314Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/monkey-1625222570432_tcm1488-524145.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.137Z","timestamp":1786444083137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/monkey-1625222570432_tcm1488-524145.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epImsTqX1ETCp5p2aFtcG93A1opFMFj1j%2B46Fok6PSayri%2BtL7LdBg%2BZSpwQLrP56gZxw2X8xtNfC4wR7n0fm4eGEFsA1GLifN3QmZjCGtjdOV0U%2Bhnjeaj88CQXVgDXbCE%3D\"}]}\r\ncf-ray: a2968d1f9e065695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5658,"size_decoded":6393,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"070c7357e6deddb9b9ef3a78a5f0c334","sha1":"1e5d03676b329a4ad6f75df150cfcb3eccf36093","sha256":"878409303e9bf6f4e49c37569c2920705b9b508a66972d5ebbdc367cfa9b3366","sha512":"58b11993e40ac09b167737ea815ebb64a3954b912eafb75d64a8f456dba8060ba10da11bed7a80467e8e7199e7544aab4f5d636dccf05f6cf4129ac0d75a8461","ssdeep":"96:DJ8efcI+VbW+9cpmy8j+IqYYOIQb4WPmUkURVyzgy6ZcI13CStySEM46:DaeL+Vhw8j+dYYPURVTpTdntTdv","tlshash":"b3c1afbcb000b8535164c67fb3827495dbd63ab4133b8c348dfa78919d4aec155f5d16","first_seen":"2025-06-27T23:53:39.286242Z","last_seen":"2026-08-11T10:28:42.236422Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/uploads/fortunePanda.webp","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.717Z","timestamp":1786444083717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /uploads/fortunePanda.webp HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnivRVDBoZL3c%2BtkDaR2OKs9TFEWKpJTcxDeQErKKj0OOv3TSYj1L5bi9QiwK5EBobLcG3jVgQ%2F0ooj8Y3crOTYwngWfHzfITRi8OL%2B4CygDB4zpMWNciLKkJbKlshrlLU0%3D\"}]}\r\ncf-ray: a2968d233e485695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24874,"size_decoded":25544,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"668e7c69f6d1deb871cbf4f963a4e364","sha1":"cfe312383a05d8b76fa3b9fd47038a6d845628d0","sha256":"5eb8d1321f6ff35a37871b17f490808747cc0f012b11c7de1ac34c0eabae55d5","sha512":"a6a1c499a86d13f84cf849fbed5529e5c69757837a0cb5311a059bacc4738e5c1d70cd883350b428d669706bf323223f4a2054f7e48455b27e519bf09ef83ecf","ssdeep":"768:r54GjrvWFK/NIDp5h3VHouoGKlC5O9dux+o:r++kVZWsGho","tlshash":"f3b2f10dd79073ea126604fa2c122b140a92675bacf623d385e1c4720221fe974f9bfe","first_seen":"2026-08-11T10:28:42.237433Z","last_seen":"2026-08-11T10:28:42.237433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/css/lc-27a66a873c922c7e45fd8049d730a97f-lc.min.css","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:04.784Z","timestamp":1786444084784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /css/lc-27a66a873c922c7e45fd8049d730a97f-lc.min.css HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:06 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:06 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:06 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIp6DO3UJb08jWb2U5GG%2FpKBNkLGlcGR9CaVSmY9Ry0lrcZgaodU58rhDTAFV4%2FyPhY89elpba9PhNp3XrKiviL6ayLx%2BdqE7lqx%2FzDiGLNpw%2FkK2BNv0lvNLVL105%2Fbm9U%3D\"}]}\r\ncf-ray: a2968d29eea85695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3216,"size_decoded":1610,"mime_type":"text/css","magic":"ASCII text, with very long lines (3216), with no line terminators","md5":"27a66a873c922c7e45fd8049d730a97f","sha1":"583fc38986b549d38c83d8e680b346b9d8732289","sha256":"1b5f172eb76fa3c1d9ce40402ae9980e720137d4a420b044ce386bf99d64aa8e","sha512":"ce66d2df1f825f8b42e4fcbaef4bbe718b7562b2411f6fdbc8bd13178dbe6d45f9a23c36b21a192976e297a59370656c3117906dd0c7897794b256233ba36d64","ssdeep":"","tlshash":"c561eb30967435a4dbefe2a951d7a73d162a00d17b5e008c91f32f2973ca22d066b5dd","first_seen":"2025-06-27T23:53:39.318941Z","last_seen":"2026-08-11T10:28:42.238318Z","times_seen":106,"resource_available":false,"data":null}},"time_used":1427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/uploads/jumpHighermobile.webp","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:04.859Z","timestamp":1786444084859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /uploads/jumpHighermobile.webp HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:05 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 11 Aug 2026 22:28:05 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:05 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30Y8F7YlZKqXrufdXLJpP0PhyGd7V%2FHlfFztoBw60I1K5M3SB0XkozzD2vKZRLOpyYg0mD02HloNJGuVt1%2Fp6cZlYBUJW5c%2FzXrzScCdOGb1K91fWPAvQzdh9kUeFKsEdRs%3D\"}]}\r\ncf-ray: a2968d2a5eb05695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23718,"size_decoded":24388,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"686655e88708cb989fc0cc0f9d48239c","sha1":"c75702f505cd4cf5588ab9cd36636f59aed163ff","sha256":"cc1fa0f17edcd3823b58bb7ba8dad4847427cca1533cf85afbf8b2db82ba9ecd","sha512":"835531d357a885a367ff091da52664b1f70066d0473b7018f4f3a718acbbfa1b68662103f31affad09ee76e0c701f2476b2f6ffa2ac2b68bd39c7d62c0161b67","ssdeep":"384:DLke3yFVOeqLVYs/IcqB3/yGNsg09vDnDwHiEvzg5eSxBvdV0GrDNXCQH3+oswi4:0eienOCIcqt/7sg0FDkH1s5eEFVXrDN5","tlshash":"a7b2e1ad0694d0231b7bf219458847686858cea2c5f5d944ffe0b09cc9ef2c9cf98592","first_seen":"2026-08-11T10:28:42.239268Z","last_seen":"2026-08-11T10:28:42.239268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":442,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qio111.com/5.gif","fqdn":"qio111.com","domain":"qio111.com","tld":"com"},"ip":{"addr":"104.21.83.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.106Z","timestamp":1786444083106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4d6d3c6e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 13:58:49 GMT","end":"Wed, 30 Sep 2026 14:58:41 GMT"},"fingerprint":{"sha1":"E6:3E:C3:36:1F:78:F0:9E:79:80:83:55:72:63:2B:50:C2:B8:BB:DE","sha256":"5F:E7:5D:09:1C:97:28:30:71:A3:B1:60:30:39:9F:0E:F7:6D:50:F7:40:B3:60:71:60:00:36:5E:73:1E:80:3C"}}},"request":{"raw":"GET /5.gif HTTP/1.1\r\nHost: qio111.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 433467\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kLBnVUumpEAoggyV2%2BgizO6h%2FaoUHVcviiC8m54E5zB2SBM49Mrb4DnazY%2FfsyYwpnAwXQVS%2F%2F072mnwoUKqGzCiXLY2FdB3UogUJWiBAERpOO4FhFwqthZH65W\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"60696c1dacb719367e6d28aa22e402c0\"\r\nlast-modified: Thu, 06 Nov 2025 14:56:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a2968d1faac956bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":433467,"size_decoded":434170,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 60","md5":"60696c1dacb719367e6d28aa22e402c0","sha1":"54958d0afef6c9d26baf8eabcf1ef38f0afda5d0","sha256":"350a4621892c26049f3a775b92cd12b15deddf85d10bd40d49be96ffba5336dd","sha512":"fcea395fe179cc238f757e45462c990b431201447f92a26447e3a0c00cc9cc6c0565bc1df47d846d3c644c754cf17dc6040d9608a29b013813720916376964b4","ssdeep":"12288:gBEG3A899p5Upg9c053+EUcFWMJdTBjqN:s3Vp5U2nZ+mWM/BjC","tlshash":"9194239f214ed8c1f136bea38fdbaddd4d1529c90ba5c23e07341666e858d2fc20a791","first_seen":"2025-11-07T11:52:11.829975Z","last_seen":"2026-08-11T10:28:42.240257Z","times_seen":259,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":24,"connect":12,"send":0,"wait":273,"receive":8,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T10:28:02.287Z","timestamp":1786444082287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeg1SCkgN3WZjw26diykwvFNLfQ%2FbSEeMg3KcfWqNE0e9w2uaT29PsF6gzCKBJf6kLDR75z2P7O9mIljq7LkC61Haudb557lGhNKdkWVzso1jUqCZAVCN1I2MMrJExzOdxA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2968d1a6dc75695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153669,"size_decoded":15190,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (608), with CRLF, LF line terminators","md5":"f893c577621fcc49d75864e27810343a","sha1":"7bf49f4de2ef82e1e4a7c8fae21d0337d64e3586","sha256":"1bc6d3957af0d902b3ecd14339b83b7254a0700c948c43e867acb5c81e837e08","sha512":"0710793c880c2c7119870981416727932c607657c87ac8da69c0299836d3443817152dbaed1765e917b2e880cec08ac68fdae276384f7ad916899918fa7a7518","ssdeep":"768:zD8555lWBDAQsaNBOwGjgBOwGAuBbf7BbCVB9TNB9WX72Sp5LBbEbBb+DBbQLtGH:s555lWtAJ72SZkaI0ZQH/mMwF","tlshash":"29e3a92150c1903741b392a69f759b9afee19207cb478608b6ed6bcb8ff7d41cd23158","first_seen":"2026-08-11T10:28:42.241556Z","last_seen":"2026-08-11T10:28:42.241556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":0,"dns":6,"connect":14,"send":0,"wait":378,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/mobile-menu-poker.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.097Z","timestamp":1786444083097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/mobile-menu-poker.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23p6XoYyO9j1pRSKuWEqOGqlfpLIEFJb43Bw4XRQa8SFd2INGX%2FB6JUpBJYK8PKyvbhO2B3tTVvhlCHpdHH9RAaQ30FAEcikE%2Flhy0IN8%2Bb81txSZgPWVU51agJMCxCWhtQ%3D\"}]}\r\ncf-ray: a2968d1f5df25695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3467,"size_decoded":4206,"mime_type":"image/png","magic":"PNG image data, 70 x 82, 8-bit/color RGBA, non-interlaced","md5":"7baa623c3d71e924708b3910c882d7ae","sha1":"d7697daaeda56e70d56afea696240864cc85546e","sha256":"725b7d0c515e3bd735258b45177905e6276a06db5452dea468f749c776615a72","sha512":"4ec320064c801e01bc9edacf95e5447ef2d7831961c4a2d0b723c8ce348e8de3ac34ccfc60a24462863062138596f7333c4c02a482171282a8ec6f0548aa7e2c","ssdeep":"","tlshash":"44617d36de8da355f4cf08a8dba5046ee9f8576c0ec14b4b87f801551ca46e8c203b5a","first_seen":"2025-06-27T23:53:39.323846Z","last_seen":"2026-08-11T10:28:42.242581Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/PokerPCTablesWebsite_14s_V2_AB.mp4","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:04.861Z","timestamp":1786444084861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /PokerPCTablesWebsite_14s_V2_AB.mp4 HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:06 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:06 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4YFUlhv7jJ6sSpBFlqmFby0PGAngDes3J0zhmb57MDK9nLyEiWiKEf09yox78ZSRFVsmyaxkjbH3VhHEGsboiLBEHWmUwAm3fpjmkVMmUOErch5KIiMhwJHuMHC8nJ21Vjs%3D\"}]}\r\ncf-ray: a2968d2a5eb15695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2208489,"size_decoded":2209130,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"8b8660d740225ff323c04b9e246c4434","sha1":"6d78eb7522c5ed1a9e3f77d9baf1b4a2942cd44b","sha256":"3ed18f98ef2bea8464b7a0563016aa9389bf1d883e79d22714c1cada0f3e6c8f","sha512":"6d77441b89c8aa41514bcb12a0647e13cc95679e55535bdac4769c2016a59b087d9b7708fc5cfa346c695a577a0bd04e51e7dd9e50e3ddd5465d6376321b7070","ssdeep":"24576:rmtU5zxhLhU1ynKetDe5ZmVq1/JM7/ylXuoLv:K+5zz1U1qKetD82q1/JMWZJ","tlshash":"0a2501ae5c968221ff8cff3e64a5c416e5d04a08cd86c35fb52c091687ba1e603bf576","first_seen":"2025-11-03T04:56:47.162647Z","last_seen":"2026-08-11T10:28:42.24353Z","times_seen":105,"resource_available":false,"data":null}},"time_used":2668,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1428,"receive":1240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/css/poker.css","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.125Z","timestamp":1786444083125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /css/poker.css HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jU5LKAQRMrCpCjPylRRXTakUF1jOlvZd73bEeQSoeqo%2BbN4pogAWcY0as%2BnX17%2FgST5FyBKnRpacS146YgIMHv3uC6wYqz1AhcsTexa2mUlN7LoSEUpAIGZudpZ7ekKPp%2Fs%3D\"}]}\r\ncf-ray: a2968d1f8dff5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165600,"size_decoded":25528,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f0eefaeb77458440b57849fd2a374248","sha1":"dcf696363b639f5640ab542fb4f52fb2837846a0","sha256":"74186f6028ee7b6563a1e03800d568bfc2cc8d37fd4abbe480fc5e604f565e1a","sha512":"2af399d6540f558cd07af8b968b22b658c285322837c53048a51741ae72718379f07e7f4b9575055ac760d426205fcdfb604f3fef71a6ab7ffdfe8447d45b0b1","ssdeep":"3072:LeOLP+e6eM8P1P+PNeVeueuPePNeILP1P+e6epP8PeeVeuP1etKwuV8KYlT/JWNT:LeOLP+e6eM8P1P+PNeVeueuPePNeILPM","tlshash":"aff3d7255a16282cf0ff867d96b57e9e036aa515cfc3a1eeb0935948c7cf38106726cc","first_seen":"2025-11-03T04:56:47.157061Z","last_seen":"2026-08-11T10:28:42.24445Z","times_seen":105,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1464,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/glasses-1625222531779_tcm1488-524143.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.135Z","timestamp":1786444083135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/glasses-1625222531779_tcm1488-524143.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSZYWem37yqYREWz97jxGBSu0xlI4uD12wI9Q8SSkUAJcED4UcqGv36FS4vBgmbA8Tk2xhUiLG%2BEJFNZzbj%2B8XQPFuCfT9ATvD0Y4cMdMyJ5WV5R9vZkTjdVP8j%2FWZopog4%3D\"}]}\r\ncf-ray: a2968d1f9e055695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5809,"size_decoded":6548,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"7d63ad9a3e5cbd6613013ce82335ae63","sha1":"615ab70a6f564750c8d1f68d4a8c62bb418c5780","sha256":"a7752efa6ce65f21b3a6131fc8fbed98e984e1e9dee965606d2e8c7f76dfd117","sha512":"aaade27be9b40ad3258504f919838c17088d30eafb5ae66e7af995b5473e97f99794a1d4591df519903e720e5445d340e73963fd55d090c5526d0fdaad9703d7","ssdeep":"96:Lghlkfydoioj5p1iC69/tPIt1lq1aTwfzI3x6Uwllem3J+c1WDiCRGbFcn/FhCzh:LgrkIoLsCEPu1lqETwfzCpwTem5+kWuN","tlshash":"a2c17da653a6d4759e36f92f4070f9868449fa5cfc0e220178c1fcceb3693158063669","first_seen":"2025-06-27T23:53:39.308489Z","last_seen":"2026-08-11T10:28:42.245405Z","times_seen":107,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/loader.gif","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.696Z","timestamp":1786444083696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/loader.gif HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/css/poker-top-section.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/gif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BWy1diFd8qC3PJJ1Qz5QgaDhYweNgM44HZxZSiq%2BQ6vTEe8bijVLj2%2BnaPydLVaieGrmZlQABWtZgI8bp7v8Svkpo55sbs%2F9bAotOofAtU01YAyblzp95N8cjXzPRu2p6o%3D\"}]}\r\ncf-ray: a2968d231e445695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25056,"size_decoded":24973,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"b724de0e9e92a45edc9960ae2bcc2c1f","sha1":"b351f3cdc79d4a99e17213b001fdea5a1e078ae4","sha256":"90698361ed693c13536259f2380f78073573d9850602ed5926b46744e87b6ccc","sha512":"bf5d5f828494ba63e2667bdea3c00c100cba844ab025367f227cd9fa4a605032ab844d6410a2213a2eb3b3e53ead62ea045982871b113f526dfe3b4c71a13a50","ssdeep":"768:9aDOMedhhB4ebsCAKqNzQlflfjbBGLpcqwe:Yqhd5P7iNGlBGLke","tlshash":"12b2d14bc56a8e86db20c3f507ce2494ab9b6ff05436403720793e6d364e1bbc59e4e6","first_seen":"2025-06-27T23:53:39.318308Z","last_seen":"2026-08-11T10:28:42.246569Z","times_seen":107,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":375,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/888-favicon.ico","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:05.672Z","timestamp":1786444085672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/888-favicon.ico HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:07 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 11 Aug 2026 22:28:07 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:07 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWEpxKbMCAK9e0022c8Stg%2FtcS2Y5hT5LanK3Uv1HNr9rVeYgsnaJK2nbx8yquqQW9OmxTKhM%2Bgam%2BSzudg0kw5WNAotuG7HEbeevEAuCHIcOTn5BpLFZKimbuXNJGdgQ%2BM%3D\"}]}\r\ncf-ray: a2968d2f6eef5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10031,"size_decoded":10775,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced","md5":"81f74d98b2678006d1067df2ceb8aae9","sha1":"8fcab0f7e5c4a4a67f1cff4390460b497e42e021","sha256":"5732208519f9b777198ecc1cc12ad7a9c8aec0603787b22cfd8feb70d5c5c979","sha512":"3e62234802a0708cd8263fa63444b3a15e62785ab9ac30041d23855ae72db9652055ec9a6e208f5b63a3ce2a14addf7c6070f4f00793cbad2d9ca677024e9272","ssdeep":"192:Bngm27v7bk6eKmYvMFisZWlhswXZH8qHq8vYHQoRuRWXPnGt:Bgm27HkJvYvz7/FXt8qHlkZfU","tlshash":"fa22b0ed7a62d4926b1f037acd80e1375127e25f263e7334162a74789f9290c368ac86","first_seen":"2026-08-11T10:28:42.247534Z","last_seen":"2026-08-11T10:28:42.247534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1478,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/shark-1625222429006_tcm1488-524138.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.138Z","timestamp":1786444083138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/shark-1625222429006_tcm1488-524138.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qT4Duht5KzXXPs%2BxZ2Y8sl5nv1a4sgtnW6UDoDPFY%2FR3bMDBuLY%2B77HKKE4nFHWt6A5dVwZ6DStjm8TVx2%2FiG39D7Iq1IVhg4Emr198IwkTQ4EHHMUQFk3xuInflCjgr3o%3D\"}]}\r\ncf-ray: a2968d1f9e075695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5815,"size_decoded":6556,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"9c184f7ea70705445e2e0d5cc1f63b8b","sha1":"8f36c902b2e5ab1c14a18a49fa539d5bff7df76f","sha256":"a5ec6f7e8c502a1a34895d7e61f790e11bb4ee5be768c18c9fc795aa3f7bb1e9","sha512":"f1ebe1c6451737eaddd26b997ceb899bd1cb78d343ff277c8534ee9b8f21cf637e31d687cfb206d5ec2dbd9e272f67e6b2fcc8002caf6a5b554b114419f570c2","ssdeep":"96:MtywDn8+NZ6uhZhBS13z5D7YDMrOvrb1OTCa+DYJJP6zkniMUjOGbFhvZMHz:HMMX11kDKyZOTVg4ni3FhRMHz","tlshash":"bbc18fbe10157e7e657124ab221f893daf54fc4514ec726c68a9003c9c1dfe5b30c788","first_seen":"2025-06-27T23:53:39.316352Z","last_seen":"2026-08-11T10:28:42.248577Z","times_seen":107,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/uploads/powerCrown.webp","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.715Z","timestamp":1786444083715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /uploads/powerCrown.webp HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:05 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 11 Aug 2026 22:28:05 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:05 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eOfhEMwJG%2FWOUZCscTzCgnd8hJ8pNQUCxDQ2hL5Fi1cqmDid5fM36q6tokGXVIlEHY6SDlOhR%2FQ6%2FKCx3fC1eqN3CuTOD9fhKRnp3GOm7z%2FIN1aA3ZgF8gxN5V6iqqREom0%3D\"}]}\r\ncf-ray: a2968d233e465695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19848,"size_decoded":20520,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a42c22fc853c6157be594ffde428912","sha1":"7645e9c204e1aed670d16927757f5949b10d7210","sha256":"d930489f0df5aafd63becad99fc637a97e223f8465e4bbcecd44511224bf0f66","sha512":"2d8cdfd73144dab727ae858cd1012fff1861af837765e3b27b6764cc44ae8b4eb161eb9d3074dcb19c0ec279c05dc61ec6aea74bb344bee712fe70fa778b86af","ssdeep":"384:mRMqnHu0cBzYb5qsUOKcfMBlXXEnuso0/FGC13QrAsh2zG0dhMR/:5icB0osUhEuz0X1Yp2ykaR/","tlshash":"2592e1b2825a3856da5729b7c0a06edfe51f105d4cd094c66333150ae814cf8bdffa2b","first_seen":"2026-08-11T10:28:42.249836Z","last_seen":"2026-08-11T10:28:42.249836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1513,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/uploads/wolfPower.webp","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.719Z","timestamp":1786444083719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /uploads/wolfPower.webp HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6%2FsGPClyjhBiMg3bKflxvS9SAlt9Sbn27X9Sk%2BS%2FwAncSoHmgX9ifaTWlT6wCvwbzas3HMjRkJB2hzR8B9AHzV38T5DPKDYwvqZ3h7FA1KJe1dRmukWWBbGCa%2FRwf7TYpY%3D\"}]}\r\ncf-ray: a2968d233e4a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17956,"size_decoded":18628,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c789b051dc6f93c6062cb152b0669c5a","sha1":"aeec5b9ba3529d489db9085eca0f13ce43579647","sha256":"ca29daa9ad66f9e198de55a56092a0352d9284aae82271d4eabe8ac6d7b84322","sha512":"35ed0cc512f792b6a67d1227fbfc70b8c9ee8078247166065231b0efd7889543a29d2d1c978eec24a09b8d1d6c597ce9c95f1c3d350fd6c05a7556819adba256","ssdeep":"384:sZs0yKDibGYoZGRJUFgFGsHefsEJ+POLKn/Ts/eFcT87s2lVhatSIL2l6:si0Viba2jVefsEMOLKbceS87s2lVhDIR","tlshash":"9182d10b0baddde9d278521d24d087dced6f9bb2b44b8680fee4a9e05d51254b24cf28","first_seen":"2026-08-11T10:28:42.250812Z","last_seen":"2026-08-11T10:28:42.250812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/888poker-BestBeginner-1663831794608.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.121Z","timestamp":1786444083121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/888poker-BestBeginner-1663831794608.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLEA4iepC%2F%2B5AOt6216nmD9qZ58XprcuI%2FvPVoQXyhKIaFOr0iw4u5irtMWCNWzisFAM3yNMg2HPwOisX1%2BXS4uzlFDxi0vZKCm8bxL7EYUldos3fcZaR6jq6LwLO182xHU%3D\"}]}\r\ncf-ray: a2968d1f7dfb5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11536,"size_decoded":12025,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"73ba000f6ad1ecb355ef4f8a659549e0","sha1":"4d2e756f69ba0fade89c75aa40c737bac9e79465","sha256":"dab42ec5493bf94df9ead6c50918e0fc1459b905652e04215a2512ec1585e036","sha512":"08ea4a5735d596838f7146fb4867ef74263c0b8ef09f71105be5faa7b03d574012671adc734b515e1ddf4bcd0fdf49c7f1e36bcddb1c7cee5e0af43ef968a671","ssdeep":"192:RxgmLtCBgFxfcjetvMxZpC8zW9svGnHDCRtbYF27rsFkwbrBqGL2f:RG8tQeACvsvGHDQbU27xurg02f","tlshash":"1b32d08cfad06036a145e03410f26d6b3d364096e1bd3e6ebe4f8265a4553e9418aa5f","first_seen":"2025-11-03T04:56:47.174653Z","last_seen":"2026-08-11T10:28:42.251822Z","times_seen":106,"resource_available":false,"data":null}},"time_used":1409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/888poker-EGR-Mobile-Header-2021-white-1658742690698-1663831827008.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.117Z","timestamp":1786444083117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/888poker-EGR-Mobile-Header-2021-white-1658742690698-1663831827008.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:04 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ePA0XNaMqHi9EuTDrmFmzi%2B%2FegOBvDl4y50gIjeAjU7adkn1ZOhtpk3RvOzRvar8uDby9h%2FUeGWSipnBfO%2Bx16SNAE2wjc7ckJDmmBzVNvHMZw0hPaH6erHKFTxlY2E2zc%3D\"}]}\r\ncf-ray: a2968d1f7df85695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13462,"size_decoded":14203,"mime_type":"image/png","magic":"PNG image data, 247 x 142, 8-bit/color RGBA, non-interlaced","md5":"23c54c07b9fc47170758f4dd7ac180b4","sha1":"73a6112903935784d01291db1b60a765558d6981","sha256":"0724446aeda4396ca402ca54b1359038ef8fd635dff45404eda27650e8ce6dd0","sha512":"c9467df8f7fea2471cdfcb4ce1e38f015bfd095e2d15bb7dcf84489b6c25d3828f7b04df4e7c9b21ac508b025fea914663412e3fce5ddccdf34f12f3aeff425e","ssdeep":"384:n1YFE0+aTr60Bz2s3ilUcT/u9/VkaZe23MGHZb:+Fag7BztSUcTU/VNXcGh","tlshash":"9152a0aad38781188731f9ae9d6f515f8d045cc2c70a1470c6afa715e4d846ed5b920e","first_seen":"2025-11-03T04:56:47.184399Z","last_seen":"2026-08-11T10:28:42.252778Z","times_seen":105,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/888Poker-IGA-1663831904672.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.122Z","timestamp":1786444083122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/888Poker-IGA-1663831904672.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HOSittK6TpYqkN5RGjxics1dWquLTM1jywguCjurjeurvWKP90UvWwqvF5YycZ9Z315Q7pJaG1CWRbz13DLf7LIURaX5pZEqUGOta4L6cSCLZCjYsDrjfQXKheuG4xvxv2Q%3D\"}]}\r\ncf-ray: a2968d1f8dfd5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22698,"size_decoded":23414,"mime_type":"image/png","magic":"PNG image data, 500 x 363, 8-bit colormap, non-interlaced","md5":"6dd3c10ec5e889b901036143e90887b7","sha1":"55f50d0b66b084bdf4df75026bb9520288df269c","sha256":"9b90405441403be85f27b0f79ff8b5b7e2b80f03a93c8d1ff264d26bd1957877","sha512":"9fc3546b248a15c3169681dc69fc0cc1d0cb8f99a2450a69a8138c8bfdbe44e9a449a8b3685de5cc3d65c764b4045bb59b66f0f132ae72b33e0ef1f8daae1968","ssdeep":"384:mg2qyjWWgXnqJsg2mQidMAYCH3mtEwMLgsXiUUZ61fmdwu34fpFBOKMuLOrVikeK:mp/UmTaAR3mtEOsyUBsdwuofVO8LPkeK","tlshash":"5ca2e1f391614770732615bf8ca9c01e481ae5df5627d0694ad62eff8d83708b70962e","first_seen":"2025-11-03T04:56:47.156297Z","last_seen":"2026-08-11T10:28:42.253703Z","times_seen":105,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/upload/888poker-EGR-Mobile-Header-2022-white-1658742702346-1663831862290.png","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.118Z","timestamp":1786444083118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /upload/888poker-EGR-Mobile-Header-2022-white-1658742702346-1663831862290.png HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:03 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 11 Aug 2026 10:28:03 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7P40Bhm1%2Bs4Z3%2Fk%2F36o7YcbiJL1iQeickF5YkvVW405M7HB3otwcAFO8L7Mm9aqcTQTE8gN7Y%2BN6uDcphRIEZKu81%2FXKRHqtkVT%2F%2BNlguemIjHKV%2FDplq2KnIy6AEROrpg8%3D\"}]}\r\ncf-ray: a2968d1f7df95695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13318,"size_decoded":14067,"mime_type":"image/png","magic":"PNG image data, 247 x 142, 8-bit/color RGBA, non-interlaced","md5":"3b2b42aefaa8f18a2fae7af340a51262","sha1":"83867bcc089ee7ea05aea0452943c4e87ebd2fe3","sha256":"7ef764fb3ed2573c2f5bc241e1dd360832290ee042e42dc3ae7060f9f724f472","sha512":"e5ba42a25de9af5f564f2d70b7a76d7d94c6838287116c7f7fbbc8f73ced30a00a174859408063e86a5b96c24a15dcc218ab2ec56fb8b3e832bd69e934f552ae","ssdeep":"384:nxkH/gP5wZEWiAP39FFPa36KOd0GNdcSDopSZKbt:xkHIPwiArFPL2GN9Dwt","tlshash":"5952c040b17fbd29c518c25ff58310f16e62dc49d1f3616a280ec579a0479539eeccab","first_seen":"2025-11-03T04:56:47.121775Z","last_seen":"2026-08-11T10:28:42.254733Z","times_seen":106,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1127bet1127.com/fonts/888-demibold-webfont.woff2","fqdn":"1127bet1127.com","domain":"1127bet1127.com","tld":"com"},"ip":{"addr":"172.67.199.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1127bet1127.com/","date":"2026-08-11T10:28:03.661Z","timestamp":1786444083661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1127bet1127.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 20:12:59 GMT","end":"Sun, 27 Sep 2026 20:10:46 GMT"},"fingerprint":{"sha1":"91:5C:54:92:36:90:94:66:B8:57:01:0A:0A:42:CD:8C:D7:F0:99:06","sha256":"56:27:CE:81:23:56:A3:0F:40:0F:04:4F:08:A4:58:95:B7:20:A9:EE:71:4A:75:62:2F:6F:C6:6C:A5:66:29:9F"}}},"request":{"raw":"GET /fonts/888-demibold-webfont.woff2 HTTP/1.1\r\nHost: 1127bet1127.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1127bet1127.com/css/poker-top-section.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 11 Aug 2026 10:28:04 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=43200\r\nexpires: Tue, 11 Aug 2026 22:28:03 GMT\r\nlast-modified: Tue, 11 Aug 2026 10:28:04 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKpPHWeW0pOkz0bKKwQhu2lNa8Vi%2FP11hv5UqNZgokP8ks1YTPV7dB52bX8PBZ2JIe9ldxcUQVMeaVBJVouWJoD8CE7eC7HlFcDfpmoEWNhGOeAHE0I05WkRAGEsdOcilNo%3D\"}]}\r\ncf-ray: a2968d22de415695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46320,"size_decoded":46989,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 46320, version 1.65","md5":"b8704ee53e5a4cd08ba7a6e9334b6149","sha1":"34ce17a89b3bab7fa11110b185971975f39f5d11","sha256":"669fd6eeb033640d9886140da2614f8605f81f2391ec7ca6334c2394fe5df94b","sha512":"ae113a274e118f81d10c0a44498e564be275df6932958b5e7baac5653edf1d8869c0dfb306706cad96288de7c6c0e720ce803116c3eefb93e0f83c3b6df2a975","ssdeep":"768:BZCWwnG7COaPRbCwa2vvdFSjTwcXHNWqSMFcqwBhsicHn9vhcPE6ARwdl36p:BZRcSSZCQvl+McFtg3GnkzqG6","tlshash":"a923f1484dc585624a407b19a3d4c12b7af279706b0bedd2db924e3b90f743cb893d5a","first_seen":"2025-06-27T23:53:39.291884Z","last_seen":"2026-08-11T10:28:42.25647Z","times_seen":106,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"1127bet1127.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}