{"report_id":"19c335d2-e5f8-414e-a0bd-c7b12e94d54f","version":6,"status":"done","tags":[],"date":"2026-05-26T07:06:19Z","url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"title":"黑白|黑白官网登录注册-2026世界杯资金受保护的投注官网","dom":{"size":58527,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"5d6cf4c9e946720169f0485dd892c4fb","sha1":"d8592062edc402252a82ce01ae8bfe3cdb9605ad","sha256":"7a135fca580a02a554362de56c8434a120ef31686f993def719e43b632a9b581","sha512":"102f8b31de58e531adfa8d0e2089ef3977198824824677eaa00df0edbf7b40a28806e8e879159cd092bec1317ad58bd59a7f72e19e3cd360b76e18f3f595e8c1","ssdeep":"1536:RYFGNbcN8OyW4efqFAgc2s5Agc2stUi5TstRMdd:neNt/xqFAgc2WAgc2+UiGtSj","tlshash":"9d4308a6759f3cbf150662c6621873ac759f8c74eb2048c2f2bfc1c522f9e64642f265","dom_hash":"domhash339becd04db520972848911f92245d3b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-30T07:06:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ku-football.bet","ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-25T08:03:34.528117Z","last_seen":"2026-05-25T08:03:34.528117Z","alert_count":1895,"request_count":379,"received_data":12804473,"sent_data":141807,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"dac1e9e171b0a4c49c5b460cb238ce5e","sha1":"181c6a77bff15c14daf725efdfbfb2db848ceea2","sha256":"7fa96dc4e5d08184ae6bcde18985ef3af0f458c3d6051b9224752c7b637e5d11","sha512":"9af0e98f8a6af49c0401b6e289370a38862ef470a4f6848c0f209f2266ffbd3934a6f67badda849a4eee60a8f48856768e176d91041813fc035696ad646aa706","ssdeep":"","tlshash":"e1a002cc37065c2240aa57155f1f76587492321090a4ec210d05b0486671e1ba681888","size":68,"data":"","first_seen":"2026-05-25T08:03:40.878377Z","last_seen":"2026-05-26T07:06:29.751978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e77e6f9a7ac4b8ae28426017d3e852a","sha1":"6887abd059ad2762cf8e628838b466c916b21155","sha256":"c55142ee751f44abcc01b859373cccbe045dd16c8f471055aa4f0a3e07502316","sha512":"47450b906b399f3c4477b0af56912bf9023cbd0ab0db10dd6f7711cac99ef45542f23e0c359dbe83979513e90c24b98f529ef4a58f850d2a137f5de8470290a2","ssdeep":"","tlshash":"c9e0d89a0b4d0a37444a63a99afea6ce273d03b2548804abbcbcd8451cb08ad42714cc","size":365,"data":"","first_seen":"2025-04-11T10:55:28.024438Z","last_seen":"2026-06-01T22:46:44.13787Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"84659b191519f58ea9051f86b7b14d1f","sha1":"2fe00ba16525333a9c95783fb6eac5e32dfff30a","sha256":"24b1e83a3393df39bf52a78ea161a2dc51136a2f0e214b14b0195e5369b48af5","sha512":"bae00f9f38ace1d93b43770f8d84d8fb58a23605713b2e9035f4c6c661204296b815356b59a1cd0042a8db58b222356c828ac78d010cb83c03357c2f0a506091","ssdeep":"","tlshash":"d7b0011a1504563366702015fb9a3380be2316a5ab92e82f860e7518613d883d1105b2","size":95,"data":"","first_seen":"2025-04-11T10:55:28.025297Z","last_seen":"2026-06-01T22:46:44.140149Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"b613115ecf3f2bc1471ba847e26b211e","sha1":"a2d485b1bef5b71ca4d1425d28a8139723885fd0","sha256":"c869cb7d6d5a2e5a9b2165f1a804415479b09b62942682e4d230006a54e775ee","sha512":"bd87d9e35808c7c1fd978b48a3b3f997a4976921f424b285e658e4d8e2b7b24e211bd5bed1132c604160f0d24294f1926b9d8a4120a84ac4db28773bc2f207d1","ssdeep":"","tlshash":"43e0df13468c64875980a5cdac3c54c3816d813e953008efc1c302ec41073f0022bf2a","size":339,"data":"","first_seen":"2025-04-11T10:55:28.026193Z","last_seen":"2026-06-01T22:46:44.141426Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"3504bbfbad8d3c3ba1d95c4d18514539","sha1":"30f08fed218652a7b55d3d3547508616f667c9a1","sha256":"be10b242f7066ffaee77a41ccc1553aced8f09135cd934adf6e699b6cd063078","sha512":"5efd0955802f35125a80999eea195fbdf5524c0a6c1d3c810159cec1688953483e6b7a2617050188a830dc9f46259c1953e0d999e4b0a447501b431ec4b2121b","ssdeep":"","tlshash":"cac0803f840d5537c4f8214c4fce48b7f52d047c8505567ea66050cd15089f70de4d1d","size":178,"data":"","first_seen":"2025-04-11T10:55:28.027207Z","last_seen":"2026-06-01T22:46:44.142283Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"462bb35546b0c1f95ba707d2db26fa71","sha1":"7b2276e28c3231cba60aba7474e7119f842bf403","sha256":"83aef40b373190eb8fd2c0a563f52e4eb2c8c64a208794d929f207a0e1d5c061","sha512":"2dbf230943bb722acfc653844eb5e45d82eb6686fbfed490ef0a4523648218ddd73b90c2001c1b37c9b748b5aa651b956705629e5acb7f1f5e2e047c29468239","ssdeep":"","tlshash":"08219d7597dc5039c295108f167ed3dc3a6c51742d06ac89ec7cdd18ac50c6a845ec79","size":1241,"data":"","first_seen":"2025-04-11T10:55:28.029492Z","last_seen":"2026-06-01T22:46:44.143542Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a786ba21045a81368b91c7d16ac050b","sha1":"d0fffcfb66ff84b18a059b7c0506b9d943259b21","sha256":"c5cb846e8e884aac9f18017bd83c5366bc391a40650b2cdbbcef20b0cbf4b249","sha512":"77bb98237458c9709dcc9228641ee3e85780edc4fa6f1d5140eb72fd27efba40e87c53a1c0b4b7a68f30ee407418c454352ab63cb31f7a7336586fa646b56216","ssdeep":"","tlshash":"8ca002a1c86f2903a0d4d01aba7e00c4c07d0b04d49392d580cc2551145929cd019fe4","size":69,"data":"","first_seen":"2025-04-11T10:55:28.030662Z","last_seen":"2026-06-01T22:46:44.145794Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"ku-football.bet/images/ce98cb7707d6275c9dab9afef00d7687.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.176Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/ce98cb7707d6275c9dab9afef00d7687.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-8e1d\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36381,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x307, components 3","md5":"50e36de536993e38c75ba5ee6818ce52","sha1":"64b6e04add93a8624a4b7e356e8a1af2351c87d7","sha256":"57f828da52f1f892a0e3de3762c852e1a67cdb6aefaf7f8ac9593af894742439","sha512":"c6c39a0c05181b9e07ec6b2e9b49ad02ac5b9ee80db187f3e04d810bab59092d418c5a921d12076026ecae535ced9dfd3fcea7d3d6fe81ec4240332d2cbbd1f6","ssdeep":"768:xAwApN0eiIhIIIIIIIIIIISIIIKmcctnBtazQkOa7NCIbpLBe/BVw8i:xFsRMjkPJ7Ni/BVwH","tlshash":"d3f2d03ad2b202f6cd6420b6df9fb784dded10d21d8a5104d0f9e9244e667f9c44a9e3","first_seen":"2025-04-11T10:55:27.999554Z","last_seen":"2026-06-01T22:46:44.07559Z","times_seen":144,"resource_available":false,"data":null}},"time_used":1786,"timings":{"blocked":1526,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.005Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1fb3\"\r\nExpires: Thu, 25 Jun 2026 07:05:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x125, components 3","md5":"72df85960da057cc3d87eb23bc33702f","sha1":"9dba7062421bea7681cc82baeb7ba89862e51244","sha256":"0bbaed5102560a16f4ad3d2b3fc8473be95c21a63b6bb89249d50ba8c083b57a","sha512":"82c1a8fa9a1ff6b6fc92e02cb62bfafad1b9579b3c6db6e2821e6f4994c61285ede61c0fbecd43bef3bc3b60d7499254cc5e921564e13fccba5261877aeda820","ssdeep":"192:zQEHlpckPznsPWEtqlUVb3sTa3QkwV5Ok:akLnMbPb3sTaQ4k","tlshash":"36f1aec72705620ee4e00e71d356dcbe5a8cfa1512042b4fb2b5f656b1b24f2ab891cf","first_seen":"2026-04-07T00:33:16.580583Z","last_seen":"2026-06-01T17:24:49.788894Z","times_seen":59,"resource_available":false,"data":null}},"time_used":1545,"timings":{"blocked":1283,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.853Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.624Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:37 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.219Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.043Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:39 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":213,"dns":0,"connect":0,"send":0,"wait":269,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.478Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/saved_resource.html","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.260Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.193Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:34 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":484,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.226Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.045Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-21a5\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x124, components 3","md5":"16686b864a9f9e2f1853b0f129e174ba","sha1":"385155fc17d4b79f16884da4ee07bbcc0ce418ed","sha256":"25e784baef139130040f6846665218a730f9293313ab52e9a9070f3f4470c98c","sha512":"76f8ace98510297a8eff04c97953b96d10383412a86b3c8dec370c34c9170b8bb7314a43677e1a930650baba7f1bdd98ed0d63f51690519994bfb52d8bcce56a","ssdeep":"192:QijcTtoBP0VGutUVfhrQ1MovXdVvFzMmBouOF39RkYR/t3:QiITtoKsuiSBvNVvru7HRV","tlshash":"b9028f48b305e489ebad2db09f9c16961d5724cd1deecd11df37ec9459ab1fa088b4c0","first_seen":"2026-04-07T00:33:16.590269Z","last_seen":"2026-06-01T17:24:49.784192Z","times_seen":60,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.829Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.419Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:43 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":760,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.215Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":494,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.500Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.338Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.956Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:36 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.631Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.492Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.623Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:37 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":223,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download-300x143.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.234Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download-300x143.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-272e\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced","md5":"25f182d0c103d66fe08335a8a6069eb9","sha1":"c89dc2f3a8b86667ffaacbe13def784505ef1a77","sha256":"9c28d4c2fee1cb56ad26e3ec4f7d220bb085ce9b01b3566f4d9641f17629682f","sha512":"a090570c28ea6c2e5fc7ac3f4169ed44151d866dcaad1603f57824ab3e9c3cdc9ff3bb5dd084978c3a67376868748b204b0166f6f61c6fceab5ed5dac51dbb35","ssdeep":"192:ZaWlve/X3Dvh65cJ3kP2pff7kB/eGUgSiveCXcHjqJrl5GrFHTO:Ztyzhkc+PiLO/rZmutGBy","tlshash":"b9229eabc3471d60f6e59c7686f66570eab7d6ca9149293c02f2ec42c1872272f46d13","first_seen":"2026-04-07T00:33:16.589443Z","last_seen":"2026-06-01T17:24:49.789873Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":745,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.046Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1fb3\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x125, components 3","md5":"72df85960da057cc3d87eb23bc33702f","sha1":"9dba7062421bea7681cc82baeb7ba89862e51244","sha256":"0bbaed5102560a16f4ad3d2b3fc8473be95c21a63b6bb89249d50ba8c083b57a","sha512":"82c1a8fa9a1ff6b6fc92e02cb62bfafad1b9579b3c6db6e2821e6f4994c61285ede61c0fbecd43bef3bc3b60d7499254cc5e921564e13fccba5261877aeda820","ssdeep":"192:zQEHlpckPznsPWEtqlUVb3sTa3QkwV5Ok:akLnMbPb3sTaQ4k","tlshash":"36f1aec72705620ee4e00e71d356dcbe5a8cfa1512042b4fb2b5f656b1b24f2ab891cf","first_seen":"2026-04-07T00:33:16.580583Z","last_seen":"2026-06-01T17:24:49.788894Z","times_seen":59,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.744Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/saved_resource.html","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.981Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.557Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.927Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:46 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.504Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":527,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.970Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:36 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":476,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.749Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.631Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:38 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":524,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.228Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-18fa\"\r\nExpires: Thu, 25 Jun 2026 07:05:38 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x137, components 3","md5":"bda8dee65c4436cfce83461895a2cc14","sha1":"db81b1825af6cd326eccc66907520a41a79289f9","sha256":"f2801e414b59ea92de9bce8bebbc1dab147634ffea4fd6259396fc17a6e9b7c1","sha512":"ab7a2c71c4a0c2a72f002d665cfe8961028e1ff4c4cf01af281147cdc047c7d26873186cdb618578eee7ed051ddcac10521857b49e1fc0cf7d74eb6be0307051","ssdeep":"192:sSgjKreC4OF/MiYQEIdmk5hdnhALChUe/swI:sSgjKejOV1Dkk5/hMCUekh","tlshash":"70d15bfc1ed95840c5d54fa83387ab6c14862ab8d1499c353a38da075bc70c26fc0b9d","first_seen":"2026-04-07T00:33:16.592659Z","last_seen":"2026-06-01T17:24:49.771058Z","times_seen":60,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.045Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:39 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":219,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.408Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1798\"\r\nExpires: Thu, 25 Jun 2026 07:05:42 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x90, components 3","md5":"f2fa71ee26a3191c609a8d678d2c4535","sha1":"3ff30cdb000a6d08e2ebcc5442292488be4b7467","sha256":"386db202202f6d2e997685a1239a9453bf86c0127784326b5f3268d390a8b6cf","sha512":"34d28e7973d4be7d9f208cff363e07d74de362c09f8306f9bb60232faabe5d38cab742cf4734c294ab6e4dea0735816e3210feb88183e1889cbc3c78ea58a3b1","ssdeep":"96:/uEPw+nJDGvRU5wf0lhBiII7jLBZzwpyc5B5pxo4dRh:/uQw+nR5wYPRWjLBtGyCB5pbRh","tlshash":"96c19e916ba721d12c6b2ee24440321f0aa5cbb2b4770d112cbaf3e0dec28f2b916045","first_seen":"2026-04-07T00:33:16.594647Z","last_seen":"2026-06-01T17:24:49.779704Z","times_seen":59,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.209Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:43 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":751,"timings":{"blocked":492,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-150x150.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.954Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-150x150.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-e508\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b4c59da37dd7e7df930b8e82043a4038","sha1":"e793e9e0be6554e3e498c6c78af58cafd1cd7566","sha256":"d210195e4de6c230def5902892176764a100628965599c86907054eb75633e97","sha512":"57465a3b5d4ef2d8f4dd0fca5932218aef275fecc9afabab97d0a8c3aa35df6000d3f59cd5329d72f5f55152d2aebe41dae89b60e9feb62a94355c8d4506e753","ssdeep":"1536:rlHksS5mBuV07sCug4FEhsN+RwHLZ5mAsDlkmX:rlETmBuVmaee+OLZ8AsqmX","tlshash":"5043028a12cc034ec9739cc5745bbbabcf0a86cd10b9d5269853213c5be65e3abb5d18","first_seen":"2026-04-07T00:33:16.577744Z","last_seen":"2026-06-01T17:24:49.779017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":488,"dns":0,"connect":0,"send":0,"wait":263,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-1024x1024.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.180Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-1024x1024.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156459\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1401945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"0e2862ddd3b033b1f920f6aee39676c0","sha1":"6c49e8739d9918e46b2ee2afea8724b93087436e","sha256":"8c2a772270d9bfa150ec823ddb6f19bacb4025f66164b6fbf6198916324c9bdb","sha512":"ff0c33d9b46087b6069427e7e76d6fb0da773e17c542b05ed9a8ff354b7ab3c426924c651914c8bcf52d79fcfc7be292c70eafcb501581d1f397ecf5adbcd479","ssdeep":"24576:EdpICeuctJLmSORFsZ5a4sQNqUMpRGnqM2mH9:EdpIKMJOzC5a41NwRGqlW","tlshash":"6b2533dcd5494a072b06c7f65006df1d9cb3fbc92480723da64b16f2ae48bbd63a911b","first_seen":"2025-08-26T02:20:55.751221Z","last_seen":"2026-07-23T09:24:41.674216Z","times_seen":451,"resource_available":false,"data":null}},"time_used":3107,"timings":{"blocked":1467,"dns":0,"connect":0,"send":0,"wait":267,"receive":1373,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.758Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.209Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.173Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/saved_resource.html\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.295Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.404Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.007Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1798\"\r\nExpires: Thu, 25 Jun 2026 07:05:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x90, components 3","md5":"f2fa71ee26a3191c609a8d678d2c4535","sha1":"3ff30cdb000a6d08e2ebcc5442292488be4b7467","sha256":"386db202202f6d2e997685a1239a9453bf86c0127784326b5f3268d390a8b6cf","sha512":"34d28e7973d4be7d9f208cff363e07d74de362c09f8306f9bb60232faabe5d38cab742cf4734c294ab6e4dea0735816e3210feb88183e1889cbc3c78ea58a3b1","ssdeep":"96:/uEPw+nJDGvRU5wf0lhBiII7jLBZzwpyc5B5pxo4dRh:/uQw+nR5wYPRWjLBtGyCB5pbRh","tlshash":"96c19e916ba721d12c6b2ee24440321f0aa5cbb2b4770d112cbaf3e0dec28f2b916045","first_seen":"2026-04-07T00:33:16.594647Z","last_seen":"2026-06-01T17:24:49.779704Z","times_seen":59,"resource_available":false,"data":null}},"time_used":1541,"timings":{"blocked":1282,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.752Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.825Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.239Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":785,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.182Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:43 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.921Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.193Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:34 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":472,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.187Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":1238,"timings":{"blocked":979,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.194Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:34 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":485,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.013Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":1805,"timings":{"blocked":1547,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.933Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.557Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":253,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.099Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.132Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/9d5beb03f9a079a32696c4604141099a.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.173Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/9d5beb03f9a079a32696c4604141099a.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-cd6b\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52587,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x424, components 3","md5":"5921fc17cc7cbf000573d0d98ef81ee1","sha1":"6f34a1aabf959f639b33ab7ff5a9ccec2d05704b","sha256":"1df21285590bc02dae40efcc61f73177fd1fb439f90dc17828d9a0f8edd40227","sha512":"c89bf8d153bf6f1f00c1a89d9a2ad174e42a3747bb4aff40d696d5c77fad6ae5b420cc34a09b6d0d6c5f34ee425abd49ead39aab3068dfbfc0592a20c0a9c0b6","ssdeep":"1536:1cEkb0RHcW9kqcKZLfyl+U5DCeKmrNdhQniEketLUTjLE:1ceb9kqcWDyl+UZLukI4TjLE","tlshash":"0d33e1ce24047c99ebb64e3deb4783b876ac4485c167bf14007596f9afd97a6c8d8301","first_seen":"2025-04-11T10:55:27.994698Z","last_seen":"2026-06-14T23:37:01.072592Z","times_seen":145,"resource_available":false,"data":null}},"time_used":1504,"timings":{"blocked":993,"dns":0,"connect":0,"send":0,"wait":256,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/saved_resource.html","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.466Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.407Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-21a5\"\r\nExpires: Thu, 25 Jun 2026 07:05:42 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x124, components 3","md5":"16686b864a9f9e2f1853b0f129e174ba","sha1":"385155fc17d4b79f16884da4ee07bbcc0ce418ed","sha256":"25e784baef139130040f6846665218a730f9293313ab52e9a9070f3f4470c98c","sha512":"76f8ace98510297a8eff04c97953b96d10383412a86b3c8dec370c34c9170b8bb7314a43677e1a930650baba7f1bdd98ed0d63f51690519994bfb52d8bcce56a","ssdeep":"192:QijcTtoBP0VGutUVfhrQ1MovXdVvFzMmBouOF39RkYR/t3:QiITtoKsuiSBvNVvru7HRV","tlshash":"b9028f48b305e489ebad2db09f9c16961d5724cd1deecd11df37ec9459ab1fa088b4c0","first_seen":"2026-04-07T00:33:16.590269Z","last_seen":"2026-06-01T17:24:49.784192Z","times_seen":60,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.503Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":520,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-150x150.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.649Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-150x150.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-e508\"\r\nExpires: Thu, 25 Jun 2026 07:05:40 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b4c59da37dd7e7df930b8e82043a4038","sha1":"e793e9e0be6554e3e498c6c78af58cafd1cd7566","sha256":"d210195e4de6c230def5902892176764a100628965599c86907054eb75633e97","sha512":"57465a3b5d4ef2d8f4dd0fca5932218aef275fecc9afabab97d0a8c3aa35df6000d3f59cd5329d72f5f55152d2aebe41dae89b60e9feb62a94355c8d4506e753","ssdeep":"1536:rlHksS5mBuV07sCug4FEhsN+RwHLZ5mAsDlkmX:rlETmBuVmaee+OLZ8AsqmX","tlshash":"5043028a12cc034ec9739cc5745bbbabcf0a86cd10b9d5269853213c5be65e3abb5d18","first_seen":"2026-04-07T00:33:16.577744Z","last_seen":"2026-06-01T17:24:49.779017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":490,"dns":0,"connect":0,"send":0,"wait":259,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.378Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.507Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-21a5\"\r\nExpires: Thu, 25 Jun 2026 07:05:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x124, components 3","md5":"16686b864a9f9e2f1853b0f129e174ba","sha1":"385155fc17d4b79f16884da4ee07bbcc0ce418ed","sha256":"25e784baef139130040f6846665218a730f9293313ab52e9a9070f3f4470c98c","sha512":"76f8ace98510297a8eff04c97953b96d10383412a86b3c8dec370c34c9170b8bb7314a43677e1a930650baba7f1bdd98ed0d63f51690519994bfb52d8bcce56a","ssdeep":"192:QijcTtoBP0VGutUVfhrQ1MovXdVvFzMmBouOF39RkYR/t3:QiITtoKsuiSBvNVvru7HRV","tlshash":"b9028f48b305e489ebad2db09f9c16961d5724cd1deecd11df37ec9459ab1fa088b4c0","first_seen":"2026-04-07T00:33:16.590269Z","last_seen":"2026-06-01T17:24:49.784192Z","times_seen":60,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.343Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:47 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.902Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.468Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.031Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.840Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:41 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.554Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-26T07:05:32.606Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":578,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.164Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.166Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:34 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":1033,"timings":{"blocked":242,"dns":0,"connect":262,"send":0,"wait":266,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.226Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.759Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.406Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-18fa\"\r\nExpires: Thu, 25 Jun 2026 07:05:42 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x137, components 3","md5":"bda8dee65c4436cfce83461895a2cc14","sha1":"db81b1825af6cd326eccc66907520a41a79289f9","sha256":"f2801e414b59ea92de9bce8bebbc1dab147634ffea4fd6259396fc17a6e9b7c1","sha512":"ab7a2c71c4a0c2a72f002d665cfe8961028e1ff4c4cf01af281147cdc047c7d26873186cdb618578eee7ed051ddcac10521857b49e1fc0cf7d74eb6be0307051","ssdeep":"192:sSgjKreC4OF/MiYQEIdmk5hdnhALChUe/swI:sSgjKejOV1Dkk5/hMCUekh","tlshash":"70d15bfc1ed95840c5d54fa83387ab6c14862ab8d1499c353a38da075bc70c26fc0b9d","first_seen":"2026-04-07T00:33:16.592659Z","last_seen":"2026-06-01T17:24:49.771058Z","times_seen":60,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.417Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:43 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":752,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.785Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":993,"timings":{"blocked":738,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.179Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-daa\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 326 x 155, 8-bit colormap, non-interlaced","md5":"849bfd4b2abef5d9e47b876589687227","sha1":"70adaa5878cdfdca89888af57be3c031e463e49e","sha256":"30f37ebd96b918d526a30730027c16002d6ce5c3234699a381b8329603f3b7d0","sha512":"9bd91efeaeb8b7a7b06b40073bf47b06703bbe8504286e06b732428b4aaf639bbc4395006b1f5b68cc04c68a03834119ed6b46c40c46d284bbd00afd7e0ac6dd","ssdeep":"","tlshash":"9b717ea19610cd2bcb6f63136bf094a8bf32e88e758c585190fbfa1765541df0c448f4","first_seen":"2025-04-11T10:55:28.011849Z","last_seen":"2026-06-01T22:46:44.093992Z","times_seen":144,"resource_available":false,"data":null}},"time_used":1569,"timings":{"blocked":1311,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.632Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.639Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1798\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x90, components 3","md5":"f2fa71ee26a3191c609a8d678d2c4535","sha1":"3ff30cdb000a6d08e2ebcc5442292488be4b7467","sha256":"386db202202f6d2e997685a1239a9453bf86c0127784326b5f3268d390a8b6cf","sha512":"34d28e7973d4be7d9f208cff363e07d74de362c09f8306f9bb60232faabe5d38cab742cf4734c294ab6e4dea0735816e3210feb88183e1889cbc3c78ea58a3b1","ssdeep":"96:/uEPw+nJDGvRU5wf0lhBiII7jLBZzwpyc5B5pxo4dRh:/uQw+nR5wYPRWjLBtGyCB5pbRh","tlshash":"96c19e916ba721d12c6b2ee24440321f0aa5cbb2b4770d112cbaf3e0dec28f2b916045","first_seen":"2026-04-07T00:33:16.594647Z","last_seen":"2026-06-01T17:24:49.779704Z","times_seen":59,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.775Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-17ab\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x89, components 3","md5":"b7ea98efaf613249ef5f6d027d97eb94","sha1":"fb56316397e6b12fbbe30b85975bccba741b3e57","sha256":"baa68948496f7b28de9ea9c65cbfb883c381a6d9c5ed0c80792dde3c13f6e840","sha512":"e1b0a3f799d2beff2d6f62ad55a2aead53cebf21bec32bdab36c511932e087373ee2f8953e59ca6792c42b0c66e61c7e82c73f95d609f9dc87235883d373aee9","ssdeep":"96:/hEAQcn5ZPG5KBWaq8bRbaHtvdkf9Obvq1wiVkMziouddzpscE6OKAO1De2/Y52Z:/h7Qg3HJhwFZSRk3RDLACX/Mu","tlshash":"6dc1a02cfed243f46b6b4e72c68a07c593d24d11cc89490525b5d4e2af102ffb50650a","first_seen":"2026-04-07T00:33:16.575888Z","last_seen":"2026-06-01T17:24:49.766604Z","times_seen":60,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":465,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download-300x143.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.117Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download-300x143.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-272e\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced","md5":"25f182d0c103d66fe08335a8a6069eb9","sha1":"c89dc2f3a8b86667ffaacbe13def784505ef1a77","sha256":"9c28d4c2fee1cb56ad26e3ec4f7d220bb085ce9b01b3566f4d9641f17629682f","sha512":"a090570c28ea6c2e5fc7ac3f4169ed44151d866dcaad1603f57824ab3e9c3cdc9ff3bb5dd084978c3a67376868748b204b0166f6f61c6fceab5ed5dac51dbb35","ssdeep":"192:ZaWlve/X3Dvh65cJ3kP2pff7kB/eGUgSiveCXcHjqJrl5GrFHTO:Ztyzhkc+PiLO/rZmutGBy","tlshash":"b9229eabc3471d60f6e59c7686f66570eab7d6ca9149293c02f2ec42c1872272f46d13","first_seen":"2026-04-07T00:33:16.589443Z","last_seen":"2026-06-01T17:24:49.789873Z","times_seen":60,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":499,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.931Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:46 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.499Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.018Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:36 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":462,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.327Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.235Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":1019,"timings":{"blocked":757,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.180Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.028Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.202Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.511Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-17ab\"\r\nExpires: Thu, 25 Jun 2026 07:05:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x89, components 3","md5":"b7ea98efaf613249ef5f6d027d97eb94","sha1":"fb56316397e6b12fbbe30b85975bccba741b3e57","sha256":"baa68948496f7b28de9ea9c65cbfb883c381a6d9c5ed0c80792dde3c13f6e840","sha512":"e1b0a3f799d2beff2d6f62ad55a2aead53cebf21bec32bdab36c511932e087373ee2f8953e59ca6792c42b0c66e61c7e82c73f95d609f9dc87235883d373aee9","ssdeep":"96:/hEAQcn5ZPG5KBWaq8bRbaHtvdkf9Obvq1wiVkMziouddzpscE6OKAO1De2/Y52Z:/h7Qg3HJhwFZSRk3RDLACX/Mu","tlshash":"6dc1a02cfed243f46b6b4e72c68a07c593d24d11cc89490525b5d4e2af102ffb50650a","first_seen":"2026-04-07T00:33:16.575888Z","last_seen":"2026-06-01T17:24:49.766604Z","times_seen":60,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download-300x143.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.513Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download-300x143.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-272e\"\r\nExpires: Thu, 25 Jun 2026 07:05:47 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced","md5":"25f182d0c103d66fe08335a8a6069eb9","sha1":"c89dc2f3a8b86667ffaacbe13def784505ef1a77","sha256":"9c28d4c2fee1cb56ad26e3ec4f7d220bb085ce9b01b3566f4d9641f17629682f","sha512":"a090570c28ea6c2e5fc7ac3f4169ed44151d866dcaad1603f57824ab3e9c3cdc9ff3bb5dd084978c3a67376868748b204b0166f6f61c6fceab5ed5dac51dbb35","ssdeep":"192:ZaWlve/X3Dvh65cJ3kP2pff7kB/eGUgSiveCXcHjqJrl5GrFHTO:Ztyzhkc+PiLO/rZmutGBy","tlshash":"b9229eabc3471d60f6e59c7686f66570eab7d6ca9149293c02f2ec42c1872272f46d13","first_seen":"2026-04-07T00:33:16.589443Z","last_seen":"2026-06-01T17:24:49.789873Z","times_seen":60,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":497,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.744Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download-300x143.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.411Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download-300x143.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-272e\"\r\nExpires: Thu, 25 Jun 2026 07:05:43 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced","md5":"25f182d0c103d66fe08335a8a6069eb9","sha1":"c89dc2f3a8b86667ffaacbe13def784505ef1a77","sha256":"9c28d4c2fee1cb56ad26e3ec4f7d220bb085ce9b01b3566f4d9641f17629682f","sha512":"a090570c28ea6c2e5fc7ac3f4169ed44151d866dcaad1603f57824ab3e9c3cdc9ff3bb5dd084978c3a67376868748b204b0166f6f61c6fceab5ed5dac51dbb35","ssdeep":"192:ZaWlve/X3Dvh65cJ3kP2pff7kB/eGUgSiveCXcHjqJrl5GrFHTO:Ztyzhkc+PiLO/rZmutGBy","tlshash":"b9229eabc3471d60f6e59c7686f66570eab7d6ca9149293c02f2ec42c1872272f46d13","first_seen":"2026-04-07T00:33:16.589443Z","last_seen":"2026-06-01T17:24:49.789873Z","times_seen":60,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.336Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.340Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:47 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.771Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:38 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":1651,"timings":{"blocked":1388,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.725Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.198Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:43 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.114Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1798\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x90, components 3","md5":"f2fa71ee26a3191c609a8d678d2c4535","sha1":"3ff30cdb000a6d08e2ebcc5442292488be4b7467","sha256":"386db202202f6d2e997685a1239a9453bf86c0127784326b5f3268d390a8b6cf","sha512":"34d28e7973d4be7d9f208cff363e07d74de362c09f8306f9bb60232faabe5d38cab742cf4734c294ab6e4dea0735816e3210feb88183e1889cbc3c78ea58a3b1","ssdeep":"96:/uEPw+nJDGvRU5wf0lhBiII7jLBZzwpyc5B5pxo4dRh:/uQw+nR5wYPRWjLBtGyCB5pbRh","tlshash":"96c19e916ba721d12c6b2ee24440321f0aa5cbb2b4770d112cbaf3e0dec28f2b916045","first_seen":"2026-04-07T00:33:16.594647Z","last_seen":"2026-06-01T17:24:49.779704Z","times_seen":59,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.947Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-21a5\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x124, components 3","md5":"16686b864a9f9e2f1853b0f129e174ba","sha1":"385155fc17d4b79f16884da4ee07bbcc0ce418ed","sha256":"25e784baef139130040f6846665218a730f9293313ab52e9a9070f3f4470c98c","sha512":"76f8ace98510297a8eff04c97953b96d10383412a86b3c8dec370c34c9170b8bb7314a43677e1a930650baba7f1bdd98ed0d63f51690519994bfb52d8bcce56a","ssdeep":"192:QijcTtoBP0VGutUVfhrQ1MovXdVvFzMmBouOF39RkYR/t3:QiITtoKsuiSBvNVvru7HRV","tlshash":"b9028f48b305e489ebad2db09f9c16961d5724cd1deecd11df37ec9459ab1fa088b4c0","first_seen":"2026-04-07T00:33:16.590269Z","last_seen":"2026-06-01T17:24:49.784192Z","times_seen":60,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":232,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.634Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":511,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.490Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:40 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.112Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-21a5\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x124, components 3","md5":"16686b864a9f9e2f1853b0f129e174ba","sha1":"385155fc17d4b79f16884da4ee07bbcc0ce418ed","sha256":"25e784baef139130040f6846665218a730f9293313ab52e9a9070f3f4470c98c","sha512":"76f8ace98510297a8eff04c97953b96d10383412a86b3c8dec370c34c9170b8bb7314a43677e1a930650baba7f1bdd98ed0d63f51690519994bfb52d8bcce56a","ssdeep":"192:QijcTtoBP0VGutUVfhrQ1MovXdVvFzMmBouOF39RkYR/t3:QiITtoKsuiSBvNVvru7HRV","tlshash":"b9028f48b305e489ebad2db09f9c16961d5724cd1deecd11df37ec9459ab1fa088b4c0","first_seen":"2026-04-07T00:33:16.590269Z","last_seen":"2026-06-01T17:24:49.784192Z","times_seen":60,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.495Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.352Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:47 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":499,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.186Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1244,"timings":{"blocked":980,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.668Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.205Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:43 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.100Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.631Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/saved_resource.html\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.932Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:46 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":769,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.932Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.948Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1fb3\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x125, components 3","md5":"72df85960da057cc3d87eb23bc33702f","sha1":"9dba7062421bea7681cc82baeb7ba89862e51244","sha256":"0bbaed5102560a16f4ad3d2b3fc8473be95c21a63b6bb89249d50ba8c083b57a","sha512":"82c1a8fa9a1ff6b6fc92e02cb62bfafad1b9579b3c6db6e2821e6f4994c61285ede61c0fbecd43bef3bc3b60d7499254cc5e921564e13fccba5261877aeda820","ssdeep":"192:zQEHlpckPznsPWEtqlUVb3sTa3QkwV5Ok:akLnMbPb3sTaQ4k","tlshash":"36f1aec72705620ee4e00e71d356dcbe5a8cfa1512042b4fb2b5f656b1b24f2ab891cf","first_seen":"2026-04-07T00:33:16.580583Z","last_seen":"2026-06-01T17:24:49.788894Z","times_seen":59,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.637Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1fb3\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x125, components 3","md5":"72df85960da057cc3d87eb23bc33702f","sha1":"9dba7062421bea7681cc82baeb7ba89862e51244","sha256":"0bbaed5102560a16f4ad3d2b3fc8473be95c21a63b6bb89249d50ba8c083b57a","sha512":"82c1a8fa9a1ff6b6fc92e02cb62bfafad1b9579b3c6db6e2821e6f4994c61285ede61c0fbecd43bef3bc3b60d7499254cc5e921564e13fccba5261877aeda820","ssdeep":"192:zQEHlpckPznsPWEtqlUVb3sTa3QkwV5Ok:akLnMbPb3sTaQ4k","tlshash":"36f1aec72705620ee4e00e71d356dcbe5a8cfa1512042b4fb2b5f656b1b24f2ab891cf","first_seen":"2026-04-07T00:33:16.580583Z","last_seen":"2026-06-01T17:24:49.788894Z","times_seen":59,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.256Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/saved_resource.html\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.924Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:46 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.929Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:46 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.668Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.770Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:36 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.193Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.047Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1798\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x90, components 3","md5":"f2fa71ee26a3191c609a8d678d2c4535","sha1":"3ff30cdb000a6d08e2ebcc5442292488be4b7467","sha256":"386db202202f6d2e997685a1239a9453bf86c0127784326b5f3268d390a8b6cf","sha512":"34d28e7973d4be7d9f208cff363e07d74de362c09f8306f9bb60232faabe5d38cab742cf4734c294ab6e4dea0735816e3210feb88183e1889cbc3c78ea58a3b1","ssdeep":"96:/uEPw+nJDGvRU5wf0lhBiII7jLBZzwpyc5B5pxo4dRh:/uQw+nR5wYPRWjLBtGyCB5pbRh","tlshash":"96c19e916ba721d12c6b2ee24440321f0aa5cbb2b4770d112cbaf3e0dec28f2b916045","first_seen":"2026-04-07T00:33:16.594647Z","last_seen":"2026-06-01T17:24:49.779704Z","times_seen":59,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.195Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.482Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.590Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.945Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-18fa\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x137, components 3","md5":"bda8dee65c4436cfce83461895a2cc14","sha1":"db81b1825af6cd326eccc66907520a41a79289f9","sha256":"f2801e414b59ea92de9bce8bebbc1dab147634ffea4fd6259396fc17a6e9b7c1","sha512":"ab7a2c71c4a0c2a72f002d665cfe8961028e1ff4c4cf01af281147cdc047c7d26873186cdb618578eee7ed051ddcac10521857b49e1fc0cf7d74eb6be0307051","ssdeep":"192:sSgjKreC4OF/MiYQEIdmk5hdnhALChUe/swI:sSgjKejOV1Dkk5/hMCUekh","tlshash":"70d15bfc1ed95840c5d54fa83387ab6c14862ab8d1499c353a38da075bc70c26fc0b9d","first_seen":"2026-04-07T00:33:16.592659Z","last_seen":"2026-06-01T17:24:49.771058Z","times_seen":60,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":231,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.183Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":2020,"timings":{"blocked":1766,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-150x150.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.011Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-150x150.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-e508\"\r\nExpires: Thu, 25 Jun 2026 07:05:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b4c59da37dd7e7df930b8e82043a4038","sha1":"e793e9e0be6554e3e498c6c78af58cafd1cd7566","sha256":"d210195e4de6c230def5902892176764a100628965599c86907054eb75633e97","sha512":"57465a3b5d4ef2d8f4dd0fca5932218aef275fecc9afabab97d0a8c3aa35df6000d3f59cd5329d72f5f55152d2aebe41dae89b60e9feb62a94355c8d4506e753","ssdeep":"1536:rlHksS5mBuV07sCug4FEhsN+RwHLZ5mAsDlkmX:rlETmBuVmaee+OLZ8AsqmX","tlshash":"5043028a12cc034ec9739cc5745bbbabcf0a86cd10b9d5269853213c5be65e3abb5d18","first_seen":"2026-04-07T00:33:16.577744Z","last_seen":"2026-06-01T17:24:49.779017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":1811,"timings":{"blocked":1542,"dns":0,"connect":0,"send":0,"wait":266,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/saved_resource.html","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.837Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.627Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:38 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":491,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.212Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":463,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.556Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.119Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":1008,"timings":{"blocked":750,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.507Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-18fa\"\r\nExpires: Thu, 25 Jun 2026 07:05:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x137, components 3","md5":"bda8dee65c4436cfce83461895a2cc14","sha1":"db81b1825af6cd326eccc66907520a41a79289f9","sha256":"f2801e414b59ea92de9bce8bebbc1dab147634ffea4fd6259396fc17a6e9b7c1","sha512":"ab7a2c71c4a0c2a72f002d665cfe8961028e1ff4c4cf01af281147cdc047c7d26873186cdb618578eee7ed051ddcac10521857b49e1fc0cf7d74eb6be0307051","ssdeep":"192:sSgjKreC4OF/MiYQEIdmk5hdnhALChUe/swI:sSgjKejOV1Dkk5/hMCUekh","tlshash":"70d15bfc1ed95840c5d54fa83387ab6c14862ab8d1499c353a38da075bc70c26fc0b9d","first_seen":"2026-04-07T00:33:16.592659Z","last_seen":"2026-06-01T17:24:49.771058Z","times_seen":60,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.929Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:46 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.049Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/saved_resource.html\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.350Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:47 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":253,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.906Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.921Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.165Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":241,"dns":1,"connect":258,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.626Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:37 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":258,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.959Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":988,"timings":{"blocked":728,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.231Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1798\"\r\nExpires: Thu, 25 Jun 2026 07:05:38 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x90, components 3","md5":"f2fa71ee26a3191c609a8d678d2c4535","sha1":"3ff30cdb000a6d08e2ebcc5442292488be4b7467","sha256":"386db202202f6d2e997685a1239a9453bf86c0127784326b5f3268d390a8b6cf","sha512":"34d28e7973d4be7d9f208cff363e07d74de362c09f8306f9bb60232faabe5d38cab742cf4734c294ab6e4dea0735816e3210feb88183e1889cbc3c78ea58a3b1","ssdeep":"96:/uEPw+nJDGvRU5wf0lhBiII7jLBZzwpyc5B5pxo4dRh:/uQw+nR5wYPRWjLBtGyCB5pbRh","tlshash":"96c19e916ba721d12c6b2ee24440321f0aa5cbb2b4770d112cbaf3e0dec28f2b916045","first_seen":"2026-04-07T00:33:16.594647Z","last_seen":"2026-06-01T17:24:49.779704Z","times_seen":59,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.977Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.323Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.055Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:39 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.770Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-18fa\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x137, components 3","md5":"bda8dee65c4436cfce83461895a2cc14","sha1":"db81b1825af6cd326eccc66907520a41a79289f9","sha256":"f2801e414b59ea92de9bce8bebbc1dab147634ffea4fd6259396fc17a6e9b7c1","sha512":"ab7a2c71c4a0c2a72f002d665cfe8961028e1ff4c4cf01af281147cdc047c7d26873186cdb618578eee7ed051ddcac10521857b49e1fc0cf7d74eb6be0307051","ssdeep":"192:sSgjKreC4OF/MiYQEIdmk5hdnhALChUe/swI:sSgjKejOV1Dkk5/hMCUekh","tlshash":"70d15bfc1ed95840c5d54fa83387ab6c14862ab8d1499c353a38da075bc70c26fc0b9d","first_seen":"2026-04-07T00:33:16.592659Z","last_seen":"2026-06-01T17:24:49.771058Z","times_seen":60,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":230,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-150x150.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.118Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-150x150.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-e508\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b4c59da37dd7e7df930b8e82043a4038","sha1":"e793e9e0be6554e3e498c6c78af58cafd1cd7566","sha256":"d210195e4de6c230def5902892176764a100628965599c86907054eb75633e97","sha512":"57465a3b5d4ef2d8f4dd0fca5932218aef275fecc9afabab97d0a8c3aa35df6000d3f59cd5329d72f5f55152d2aebe41dae89b60e9feb62a94355c8d4506e753","ssdeep":"1536:rlHksS5mBuV07sCug4FEhsN+RwHLZ5mAsDlkmX:rlETmBuVmaee+OLZ8AsqmX","tlshash":"5043028a12cc034ec9739cc5745bbbabcf0a86cd10b9d5269853213c5be65e3abb5d18","first_seen":"2026-04-07T00:33:16.577744Z","last_seen":"2026-06-01T17:24:49.779017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":258,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:48.703Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/21fb4cbcd5025793566cb066632dd126.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.182Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/21fb4cbcd5025793566cb066632dd126.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-98fb\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39163,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x509, components 3","md5":"16edb64fd4613886c9a432077efa4e70","sha1":"e10f2265300915acedd37fc4944515d04f7162ee","sha256":"34ece1c007347a1739332e6e6d0c32fb5744848fe879c029694f21d9fa999cf4","sha512":"a5679ce594753c4593ab19553f0d479a11b1c9cb94aed918fc4a55b41f1362871691e06fd02c8cce17b93b93ce09bbb954d51aba5ee9a26bffafb11d24f49bdd","ssdeep":"768:jbCBajMChvfcN20lMqCulxLXqN2rzVjQlCd4bhj+sy75eXTuP+Zpyvzu:S8VfLqCu7LX82nVjWW4tasbTuWZr","tlshash":"7c03f1627782470ee3bfbc7c311cbba48c0f50500ddadbd9d2b0b669889b9c191d66a1","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-23T09:24:41.671849Z","times_seen":499,"resource_available":false,"data":null}},"time_used":1767,"timings":{"blocked":1511,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/saved_resource.html","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.381Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.999Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-21a5\"\r\nExpires: Thu, 25 Jun 2026 07:05:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x124, components 3","md5":"16686b864a9f9e2f1853b0f129e174ba","sha1":"385155fc17d4b79f16884da4ee07bbcc0ce418ed","sha256":"25e784baef139130040f6846665218a730f9293313ab52e9a9070f3f4470c98c","sha512":"76f8ace98510297a8eff04c97953b96d10383412a86b3c8dec370c34c9170b8bb7314a43677e1a930650baba7f1bdd98ed0d63f51690519994bfb52d8bcce56a","ssdeep":"192:QijcTtoBP0VGutUVfhrQ1MovXdVvFzMmBouOF39RkYR/t3:QiITtoKsuiSBvNVvru7HRV","tlshash":"b9028f48b305e489ebad2db09f9c16961d5724cd1deecd11df37ec9459ab1fa088b4c0","first_seen":"2026-04-07T00:33:16.590269Z","last_seen":"2026-06-01T17:24:49.784192Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1545,"timings":{"blocked":1290,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.017Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:36 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.233Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156d\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x89, components 3","md5":"f5eaa6c6308b665b318e48ba2c4b406e","sha1":"9213ce66f703bfa9bc7bcb6ffb2835fd633f3b75","sha256":"02a68f4e1f2dc5856729ad22713b248b6e27258f560e366ee16187001919e6cf","sha512":"535153787886b33c0ccae551b4bb6fdd9365ec7923c73eba66e4d22937ceb580e8bb66e58418e19850530ff98f93dd7d9ba162fd557651624cb1549c3c644f92","ssdeep":"96:pQ/twD4eQiox/o9bQwxl9Kc8HV/8deJl4i9yrktbABWE:ct+QbxgiwXYx8d0l4ikktkBWE","tlshash":"57b190d74a8bc7b4f14bac350bd5d56d6540b6117429eeb0d57dd4c944a08e60ffc0e8","first_seen":"2026-04-07T00:33:16.58394Z","last_seen":"2026-06-01T17:24:49.787852Z","times_seen":59,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":707,"dns":0,"connect":0,"send":0,"wait":265,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.047Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.628Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.637Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-21a5\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x124, components 3","md5":"16686b864a9f9e2f1853b0f129e174ba","sha1":"385155fc17d4b79f16884da4ee07bbcc0ce418ed","sha256":"25e784baef139130040f6846665218a730f9293313ab52e9a9070f3f4470c98c","sha512":"76f8ace98510297a8eff04c97953b96d10383412a86b3c8dec370c34c9170b8bb7314a43677e1a930650baba7f1bdd98ed0d63f51690519994bfb52d8bcce56a","ssdeep":"192:QijcTtoBP0VGutUVfhrQ1MovXdVvFzMmBouOF39RkYR/t3:QiITtoKsuiSBvNVvru7HRV","tlshash":"b9028f48b305e489ebad2db09f9c16961d5724cd1deecd11df37ec9459ab1fa088b4c0","first_seen":"2026-04-07T00:33:16.590269Z","last_seen":"2026-06-01T17:24:49.784192Z","times_seen":60,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.417Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.485Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:40 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.037Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.030Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download-300x143.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.050Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download-300x143.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-272e\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced","md5":"25f182d0c103d66fe08335a8a6069eb9","sha1":"c89dc2f3a8b86667ffaacbe13def784505ef1a77","sha256":"9c28d4c2fee1cb56ad26e3ec4f7d220bb085ce9b01b3566f4d9641f17629682f","sha512":"a090570c28ea6c2e5fc7ac3f4169ed44151d866dcaad1603f57824ab3e9c3cdc9ff3bb5dd084978c3a67376868748b204b0166f6f61c6fceab5ed5dac51dbb35","ssdeep":"192:ZaWlve/X3Dvh65cJ3kP2pff7kB/eGUgSiveCXcHjqJrl5GrFHTO:Ztyzhkc+PiLO/rZmutGBy","tlshash":"b9229eabc3471d60f6e59c7686f66570eab7d6ca9149293c02f2ec42c1872272f46d13","first_seen":"2026-04-07T00:33:16.589443Z","last_seen":"2026-06-01T17:24:49.789873Z","times_seen":60,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":500,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.838Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:41 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.901Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/saved_resource.html\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.193Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-150x150.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.235Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-150x150.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-e508\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b4c59da37dd7e7df930b8e82043a4038","sha1":"e793e9e0be6554e3e498c6c78af58cafd1cd7566","sha256":"d210195e4de6c230def5902892176764a100628965599c86907054eb75633e97","sha512":"57465a3b5d4ef2d8f4dd0fca5932218aef275fecc9afabab97d0a8c3aa35df6000d3f59cd5329d72f5f55152d2aebe41dae89b60e9feb62a94355c8d4506e753","ssdeep":"1536:rlHksS5mBuV07sCug4FEhsN+RwHLZ5mAsDlkmX:rlETmBuVmaee+OLZ8AsqmX","tlshash":"5043028a12cc034ec9739cc5745bbbabcf0a86cd10b9d5269853213c5be65e3abb5d18","first_seen":"2026-04-07T00:33:16.577744Z","last_seen":"2026-06-01T17:24:49.779017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":755,"dns":0,"connect":0,"send":0,"wait":260,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.464Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:40 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.533Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/saved_resource.html\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.822Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:41 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.123Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":757,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.932Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:46 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":512,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.510Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1798\"\r\nExpires: Thu, 25 Jun 2026 07:05:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x90, components 3","md5":"f2fa71ee26a3191c609a8d678d2c4535","sha1":"3ff30cdb000a6d08e2ebcc5442292488be4b7467","sha256":"386db202202f6d2e997685a1239a9453bf86c0127784326b5f3268d390a8b6cf","sha512":"34d28e7973d4be7d9f208cff363e07d74de362c09f8306f9bb60232faabe5d38cab742cf4734c294ab6e4dea0735816e3210feb88183e1889cbc3c78ea58a3b1","ssdeep":"96:/uEPw+nJDGvRU5wf0lhBiII7jLBZzwpyc5B5pxo4dRh:/uQw+nR5wYPRWjLBtGyCB5pbRh","tlshash":"96c19e916ba721d12c6b2ee24440321f0aa5cbb2b4770d112cbaf3e0dec28f2b916045","first_seen":"2026-04-07T00:33:16.594647Z","last_seen":"2026-06-01T17:24:49.779704Z","times_seen":59,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.407Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1fb3\"\r\nExpires: Thu, 25 Jun 2026 07:05:42 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x125, components 3","md5":"72df85960da057cc3d87eb23bc33702f","sha1":"9dba7062421bea7681cc82baeb7ba89862e51244","sha256":"0bbaed5102560a16f4ad3d2b3fc8473be95c21a63b6bb89249d50ba8c083b57a","sha512":"82c1a8fa9a1ff6b6fc92e02cb62bfafad1b9579b3c6db6e2821e6f4994c61285ede61c0fbecd43bef3bc3b60d7499254cc5e921564e13fccba5261877aeda820","ssdeep":"192:zQEHlpckPznsPWEtqlUVb3sTa3QkwV5Ok:akLnMbPb3sTaQ4k","tlshash":"36f1aec72705620ee4e00e71d356dcbe5a8cfa1512042b4fb2b5f656b1b24f2ab891cf","first_seen":"2026-04-07T00:33:16.580583Z","last_seen":"2026-06-01T17:24:49.788894Z","times_seen":59,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.412Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":511,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.041Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.856Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":490,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.454Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.018Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.095Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.097Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.404Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.015Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:36 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.184Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":2810,"timings":{"blocked":2539,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.009Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156d\"\r\nExpires: Thu, 25 Jun 2026 07:05:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x89, components 3","md5":"f5eaa6c6308b665b318e48ba2c4b406e","sha1":"9213ce66f703bfa9bc7bcb6ffb2835fd633f3b75","sha256":"02a68f4e1f2dc5856729ad22713b248b6e27258f560e366ee16187001919e6cf","sha512":"535153787886b33c0ccae551b4bb6fdd9365ec7923c73eba66e4d22937ceb580e8bb66e58418e19850530ff98f93dd7d9ba162fd557651624cb1549c3c644f92","ssdeep":"96:pQ/twD4eQiox/o9bQwxl9Kc8HV/8deJl4i9yrktbABWE:ct+QbxgiwXYx8d0l4ikktkBWE","tlshash":"57b190d74a8bc7b4f14bac350bd5d56d6540b6117429eeb0d57dd4c944a08e60ffc0e8","first_seen":"2026-04-07T00:33:16.58394Z","last_seen":"2026-06-01T17:24:49.787852Z","times_seen":59,"resource_available":false,"data":null}},"time_used":1550,"timings":{"blocked":1287,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download-300x143.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.010Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download-300x143.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-272e\"\r\nExpires: Thu, 25 Jun 2026 07:05:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced","md5":"25f182d0c103d66fe08335a8a6069eb9","sha1":"c89dc2f3a8b86667ffaacbe13def784505ef1a77","sha256":"9c28d4c2fee1cb56ad26e3ec4f7d220bb085ce9b01b3566f4d9641f17629682f","sha512":"a090570c28ea6c2e5fc7ac3f4169ed44151d866dcaad1603f57824ab3e9c3cdc9ff3bb5dd084978c3a67376868748b204b0166f6f61c6fceab5ed5dac51dbb35","ssdeep":"192:ZaWlve/X3Dvh65cJ3kP2pff7kB/eGUgSiveCXcHjqJrl5GrFHTO:Ztyzhkc+PiLO/rZmutGBy","tlshash":"b9229eabc3471d60f6e59c7686f66570eab7d6ca9149293c02f2ec42c1872272f46d13","first_seen":"2026-04-07T00:33:16.589443Z","last_seen":"2026-06-01T17:24:49.789873Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1796,"timings":{"blocked":1542,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.762Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":832,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.850Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:42 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.090Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.627Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:38 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":516,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.204Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:43 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.785Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":746,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.560Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:45 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.350Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:47 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.890Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.489Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:40 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.849Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:42 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.930Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:46 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.509Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1fb3\"\r\nExpires: Thu, 25 Jun 2026 07:05:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x125, components 3","md5":"72df85960da057cc3d87eb23bc33702f","sha1":"9dba7062421bea7681cc82baeb7ba89862e51244","sha256":"0bbaed5102560a16f4ad3d2b3fc8473be95c21a63b6bb89249d50ba8c083b57a","sha512":"82c1a8fa9a1ff6b6fc92e02cb62bfafad1b9579b3c6db6e2821e6f4994c61285ede61c0fbecd43bef3bc3b60d7499254cc5e921564e13fccba5261877aeda820","ssdeep":"192:zQEHlpckPznsPWEtqlUVb3sTa3QkwV5Ok:akLnMbPb3sTaQ4k","tlshash":"36f1aec72705620ee4e00e71d356dcbe5a8cfa1512042b4fb2b5f656b1b24f2ab891cf","first_seen":"2026-04-07T00:33:16.580583Z","last_seen":"2026-06-01T17:24:49.788894Z","times_seen":59,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.512Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156d\"\r\nExpires: Thu, 25 Jun 2026 07:05:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x89, components 3","md5":"f5eaa6c6308b665b318e48ba2c4b406e","sha1":"9213ce66f703bfa9bc7bcb6ffb2835fd633f3b75","sha256":"02a68f4e1f2dc5856729ad22713b248b6e27258f560e366ee16187001919e6cf","sha512":"535153787886b33c0ccae551b4bb6fdd9365ec7923c73eba66e4d22937ceb580e8bb66e58418e19850530ff98f93dd7d9ba162fd557651624cb1549c3c644f92","ssdeep":"96:pQ/twD4eQiox/o9bQwxl9Kc8HV/8deJl4i9yrktbABWE:ct+QbxgiwXYx8d0l4ikktkBWE","tlshash":"57b190d74a8bc7b4f14bac350bd5d56d6540b6117429eeb0d57dd4c944a08e60ffc0e8","first_seen":"2026-04-07T00:33:16.58394Z","last_seen":"2026-06-01T17:24:49.787852Z","times_seen":59,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.918Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.622Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.057Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:39 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":734,"timings":{"blocked":469,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.060Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:39 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":501,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.558Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:44 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":256,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.942Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":227,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.417Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.269Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.473Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:40 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-150x150.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.051Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-150x150.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-e508\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b4c59da37dd7e7df930b8e82043a4038","sha1":"e793e9e0be6554e3e498c6c78af58cafd1cd7566","sha256":"d210195e4de6c230def5902892176764a100628965599c86907054eb75633e97","sha512":"57465a3b5d4ef2d8f4dd0fca5932218aef275fecc9afabab97d0a8c3aa35df6000d3f59cd5329d72f5f55152d2aebe41dae89b60e9feb62a94355c8d4506e753","ssdeep":"1536:rlHksS5mBuV07sCug4FEhsN+RwHLZ5mAsDlkmX:rlETmBuVmaee+OLZ8AsqmX","tlshash":"5043028a12cc034ec9739cc5745bbbabcf0a86cd10b9d5269853213c5be65e3abb5d18","first_seen":"2026-04-07T00:33:16.577744Z","last_seen":"2026-06-01T17:24:49.779017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":502,"dns":0,"connect":0,"send":0,"wait":263,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.402Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.449Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.621Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.626Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.281Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.111Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-18fa\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x137, components 3","md5":"bda8dee65c4436cfce83461895a2cc14","sha1":"db81b1825af6cd326eccc66907520a41a79289f9","sha256":"f2801e414b59ea92de9bce8bebbc1dab147634ffea4fd6259396fc17a6e9b7c1","sha512":"ab7a2c71c4a0c2a72f002d665cfe8961028e1ff4c4cf01af281147cdc047c7d26873186cdb618578eee7ed051ddcac10521857b49e1fc0cf7d74eb6be0307051","ssdeep":"192:sSgjKreC4OF/MiYQEIdmk5hdnhALChUe/swI:sSgjKejOV1Dkk5/hMCUekh","tlshash":"70d15bfc1ed95840c5d54fa83387ab6c14862ab8d1499c353a38da075bc70c26fc0b9d","first_seen":"2026-04-07T00:33:16.592659Z","last_seen":"2026-06-01T17:24:49.771058Z","times_seen":60,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.352Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:47 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":500,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.170Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":1264,"timings":{"blocked":996,"dns":0,"connect":0,"send":0,"wait":266,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download-300x143.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.777Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download-300x143.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-272e\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced","md5":"25f182d0c103d66fe08335a8a6069eb9","sha1":"c89dc2f3a8b86667ffaacbe13def784505ef1a77","sha256":"9c28d4c2fee1cb56ad26e3ec4f7d220bb085ce9b01b3566f4d9641f17629682f","sha512":"a090570c28ea6c2e5fc7ac3f4169ed44151d866dcaad1603f57824ab3e9c3cdc9ff3bb5dd084978c3a67376868748b204b0166f6f61c6fceab5ed5dac51dbb35","ssdeep":"192:ZaWlve/X3Dvh65cJ3kP2pff7kB/eGUgSiveCXcHjqJrl5GrFHTO:Ztyzhkc+PiLO/rZmutGBy","tlshash":"b9229eabc3471d60f6e59c7686f66570eab7d6ca9149293c02f2ec42c1872272f46d13","first_seen":"2026-04-07T00:33:16.589443Z","last_seen":"2026-06-01T17:24:49.789873Z","times_seen":60,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":491,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.918Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.169Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":755,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.216Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.229Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-21a5\"\r\nExpires: Thu, 25 Jun 2026 07:05:38 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x124, components 3","md5":"16686b864a9f9e2f1853b0f129e174ba","sha1":"385155fc17d4b79f16884da4ee07bbcc0ce418ed","sha256":"25e784baef139130040f6846665218a730f9293313ab52e9a9070f3f4470c98c","sha512":"76f8ace98510297a8eff04c97953b96d10383412a86b3c8dec370c34c9170b8bb7314a43677e1a930650baba7f1bdd98ed0d63f51690519994bfb52d8bcce56a","ssdeep":"192:QijcTtoBP0VGutUVfhrQ1MovXdVvFzMmBouOF39RkYR/t3:QiITtoKsuiSBvNVvru7HRV","tlshash":"b9028f48b305e489ebad2db09f9c16961d5724cd1deecd11df37ec9459ab1fa088b4c0","first_seen":"2026-04-07T00:33:16.590269Z","last_seen":"2026-06-01T17:24:49.784192Z","times_seen":60,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.741Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/saved_resource.html\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.039Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.400Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:42 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.116Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156d\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x89, components 3","md5":"f5eaa6c6308b665b318e48ba2c4b406e","sha1":"9213ce66f703bfa9bc7bcb6ffb2835fd633f3b75","sha256":"02a68f4e1f2dc5856729ad22713b248b6e27258f560e366ee16187001919e6cf","sha512":"535153787886b33c0ccae551b4bb6fdd9365ec7923c73eba66e4d22937ceb580e8bb66e58418e19850530ff98f93dd7d9ba162fd557651624cb1549c3c644f92","ssdeep":"96:pQ/twD4eQiox/o9bQwxl9Kc8HV/8deJl4i9yrktbABWE:ct+QbxgiwXYx8d0l4ikktkBWE","tlshash":"57b190d74a8bc7b4f14bac350bd5d56d6540b6117429eeb0d57dd4c944a08e60ffc0e8","first_seen":"2026-04-07T00:33:16.58394Z","last_seen":"2026-06-01T17:24:49.787852Z","times_seen":59,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":498,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.353Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:47 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.665Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/saved_resource.html\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.008Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-17ab\"\r\nExpires: Thu, 25 Jun 2026 07:05:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x89, components 3","md5":"b7ea98efaf613249ef5f6d027d97eb94","sha1":"fb56316397e6b12fbbe30b85975bccba741b3e57","sha256":"baa68948496f7b28de9ea9c65cbfb883c381a6d9c5ed0c80792dde3c13f6e840","sha512":"e1b0a3f799d2beff2d6f62ad55a2aead53cebf21bec32bdab36c511932e087373ee2f8953e59ca6792c42b0c66e61c7e82c73f95d609f9dc87235883d373aee9","ssdeep":"96:/hEAQcn5ZPG5KBWaq8bRbaHtvdkf9Obvq1wiVkMziouddzpscE6OKAO1De2/Y52Z:/h7Qg3HJhwFZSRk3RDLACX/Mu","tlshash":"6dc1a02cfed243f46b6b4e72c68a07c593d24d11cc89490525b5d4e2af102ffb50650a","first_seen":"2026-04-07T00:33:16.575888Z","last_seen":"2026-06-01T17:24:49.766604Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1539,"timings":{"blocked":1281,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.560Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.600Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.950Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1798\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x90, components 3","md5":"f2fa71ee26a3191c609a8d678d2c4535","sha1":"3ff30cdb000a6d08e2ebcc5442292488be4b7467","sha256":"386db202202f6d2e997685a1239a9453bf86c0127784326b5f3268d390a8b6cf","sha512":"34d28e7973d4be7d9f208cff363e07d74de362c09f8306f9bb60232faabe5d38cab742cf4734c294ab6e4dea0735816e3210feb88183e1889cbc3c78ea58a3b1","ssdeep":"96:/uEPw+nJDGvRU5wf0lhBiII7jLBZzwpyc5B5pxo4dRh:/uQw+nR5wYPRWjLBtGyCB5pbRh","tlshash":"96c19e916ba721d12c6b2ee24440321f0aa5cbb2b4770d112cbaf3e0dec28f2b916045","first_seen":"2026-04-07T00:33:16.594647Z","last_seen":"2026-06-01T17:24:49.779704Z","times_seen":59,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.952Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-17ab\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x89, components 3","md5":"b7ea98efaf613249ef5f6d027d97eb94","sha1":"fb56316397e6b12fbbe30b85975bccba741b3e57","sha256":"baa68948496f7b28de9ea9c65cbfb883c381a6d9c5ed0c80792dde3c13f6e840","sha512":"e1b0a3f799d2beff2d6f62ad55a2aead53cebf21bec32bdab36c511932e087373ee2f8953e59ca6792c42b0c66e61c7e82c73f95d609f9dc87235883d373aee9","ssdeep":"96:/hEAQcn5ZPG5KBWaq8bRbaHtvdkf9Obvq1wiVkMziouddzpscE6OKAO1De2/Y52Z:/h7Qg3HJhwFZSRk3RDLACX/Mu","tlshash":"6dc1a02cfed243f46b6b4e72c68a07c593d24d11cc89490525b5d4e2af102ffb50650a","first_seen":"2026-04-07T00:33:16.575888Z","last_seen":"2026-06-01T17:24:49.766604Z","times_seen":60,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":476,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.642Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156d\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x89, components 3","md5":"f5eaa6c6308b665b318e48ba2c4b406e","sha1":"9213ce66f703bfa9bc7bcb6ffb2835fd633f3b75","sha256":"02a68f4e1f2dc5856729ad22713b248b6e27258f560e366ee16187001919e6cf","sha512":"535153787886b33c0ccae551b4bb6fdd9365ec7923c73eba66e4d22937ceb580e8bb66e58418e19850530ff98f93dd7d9ba162fd557651624cb1549c3c644f92","ssdeep":"96:pQ/twD4eQiox/o9bQwxl9Kc8HV/8deJl4i9yrktbABWE:ct+QbxgiwXYx8d0l4ikktkBWE","tlshash":"57b190d74a8bc7b4f14bac350bd5d56d6540b6117429eeb0d57dd4c944a08e60ffc0e8","first_seen":"2026-04-07T00:33:16.58394Z","last_seen":"2026-06-01T17:24:49.787852Z","times_seen":59,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.044Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-18fa\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x137, components 3","md5":"bda8dee65c4436cfce83461895a2cc14","sha1":"db81b1825af6cd326eccc66907520a41a79289f9","sha256":"f2801e414b59ea92de9bce8bebbc1dab147634ffea4fd6259396fc17a6e9b7c1","sha512":"ab7a2c71c4a0c2a72f002d665cfe8961028e1ff4c4cf01af281147cdc047c7d26873186cdb618578eee7ed051ddcac10521857b49e1fc0cf7d74eb6be0307051","ssdeep":"192:sSgjKreC4OF/MiYQEIdmk5hdnhALChUe/swI:sSgjKejOV1Dkk5/hMCUekh","tlshash":"70d15bfc1ed95840c5d54fa83387ab6c14862ab8d1499c353a38da075bc70c26fc0b9d","first_seen":"2026-04-07T00:33:16.592659Z","last_seen":"2026-06-01T17:24:49.771058Z","times_seen":60,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.048Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-17ab\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x89, components 3","md5":"b7ea98efaf613249ef5f6d027d97eb94","sha1":"fb56316397e6b12fbbe30b85975bccba741b3e57","sha256":"baa68948496f7b28de9ea9c65cbfb883c381a6d9c5ed0c80792dde3c13f6e840","sha512":"e1b0a3f799d2beff2d6f62ad55a2aead53cebf21bec32bdab36c511932e087373ee2f8953e59ca6792c42b0c66e61c7e82c73f95d609f9dc87235883d373aee9","ssdeep":"96:/hEAQcn5ZPG5KBWaq8bRbaHtvdkf9Obvq1wiVkMziouddzpscE6OKAO1De2/Y52Z:/h7Qg3HJhwFZSRk3RDLACX/Mu","tlshash":"6dc1a02cfed243f46b6b4e72c68a07c593d24d11cc89490525b5d4e2af102ffb50650a","first_seen":"2026-04-07T00:33:16.575888Z","last_seen":"2026-06-01T17:24:49.766604Z","times_seen":60,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":471,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.834Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.750Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.553Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.893Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.773Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1fb3\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x125, components 3","md5":"72df85960da057cc3d87eb23bc33702f","sha1":"9dba7062421bea7681cc82baeb7ba89862e51244","sha256":"0bbaed5102560a16f4ad3d2b3fc8473be95c21a63b6bb89249d50ba8c083b57a","sha512":"82c1a8fa9a1ff6b6fc92e02cb62bfafad1b9579b3c6db6e2821e6f4994c61285ede61c0fbecd43bef3bc3b60d7499254cc5e921564e13fccba5261877aeda820","ssdeep":"192:zQEHlpckPznsPWEtqlUVb3sTa3QkwV5Ok:akLnMbPb3sTaQ4k","tlshash":"36f1aec72705620ee4e00e71d356dcbe5a8cfa1512042b4fb2b5f656b1b24f2ab891cf","first_seen":"2026-04-07T00:33:16.580583Z","last_seen":"2026-06-01T17:24:49.788894Z","times_seen":59,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.816Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/saved_resource.html","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.768Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.925Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.931Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.955Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":488,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.958Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":497,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-1024x467.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.171Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-1024x467.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-9156\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37206,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x467, components 3","md5":"d6104a2535e410ab1de8347a042fdc5d","sha1":"8ca0c2fdf574a81cca7222c1356b6fa0499c2813","sha256":"607eeb1fa042011585a780173347fcfbbde879dc17e31ffa14f24b73c10ba4a3","sha512":"26f449b286b62e218a00d61484d4b504226af92b065ff2f5d5245b153edf246c1a08a2ea6d30aea8bff3de0a4c4d76260e1e425dd1c63fd36c60b1389ff1fa8c","ssdeep":"768:NHb+9jQAMr6/Z9E19snBXbYotE9xCoJk8aX+Abga1xawG3unvV/:NHbWjTM2Do9sntzy9BaX+Az11tnvV/","tlshash":"e0f2aefab73f0736e84c893f01e06215a6548b9540c5ba8b3e7d52a0c1b9bc15fe38b5","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:40.991844Z","times_seen":402,"resource_available":false,"data":null}},"time_used":1521,"timings":{"blocked":995,"dns":0,"connect":0,"send":0,"wait":263,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.633Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.042Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.403Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.489Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.516Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:47 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":1017,"timings":{"blocked":758,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.846Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:41 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.772Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%9C%9F%E4%BA%BA%E5%A8%B1%E4%B9%90%E5%9C%BA-300x124.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-21a5\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x124, components 3","md5":"16686b864a9f9e2f1853b0f129e174ba","sha1":"385155fc17d4b79f16884da4ee07bbcc0ce418ed","sha256":"25e784baef139130040f6846665218a730f9293313ab52e9a9070f3f4470c98c","sha512":"76f8ace98510297a8eff04c97953b96d10383412a86b3c8dec370c34c9170b8bb7314a43677e1a930650baba7f1bdd98ed0d63f51690519994bfb52d8bcce56a","ssdeep":"192:QijcTtoBP0VGutUVfhrQ1MovXdVvFzMmBouOF39RkYR/t3:QiITtoKsuiSBvNVvru7HRV","tlshash":"b9028f48b305e489ebad2db09f9c16961d5724cd1deecd11df37ec9459ab1fa088b4c0","first_seen":"2026-04-07T00:33:16.590269Z","last_seen":"2026-06-01T17:24:49.784192Z","times_seen":60,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.780Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":497,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.073Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-26T07:05:33.456Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:33 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":257,"dns":0,"connect":261,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.409Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-17ab\"\r\nExpires: Thu, 25 Jun 2026 07:05:42 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x89, components 3","md5":"b7ea98efaf613249ef5f6d027d97eb94","sha1":"fb56316397e6b12fbbe30b85975bccba741b3e57","sha256":"baa68948496f7b28de9ea9c65cbfb883c381a6d9c5ed0c80792dde3c13f6e840","sha512":"e1b0a3f799d2beff2d6f62ad55a2aead53cebf21bec32bdab36c511932e087373ee2f8953e59ca6792c42b0c66e61c7e82c73f95d609f9dc87235883d373aee9","ssdeep":"96:/hEAQcn5ZPG5KBWaq8bRbaHtvdkf9Obvq1wiVkMziouddzpscE6OKAO1De2/Y52Z:/h7Qg3HJhwFZSRk3RDLACX/Mu","tlshash":"6dc1a02cfed243f46b6b4e72c68a07c593d24d11cc89490525b5d4e2af102ffb50650a","first_seen":"2026-04-07T00:33:16.575888Z","last_seen":"2026-06-01T17:24:49.766604Z","times_seen":60,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.410Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156d\"\r\nExpires: Thu, 25 Jun 2026 07:05:43 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x89, components 3","md5":"f5eaa6c6308b665b318e48ba2c4b406e","sha1":"9213ce66f703bfa9bc7bcb6ffb2835fd633f3b75","sha256":"02a68f4e1f2dc5856729ad22713b248b6e27258f560e366ee16187001919e6cf","sha512":"535153787886b33c0ccae551b4bb6fdd9365ec7923c73eba66e4d22937ceb580e8bb66e58418e19850530ff98f93dd7d9ba162fd557651624cb1549c3c644f92","ssdeep":"96:pQ/twD4eQiox/o9bQwxl9Kc8HV/8deJl4i9yrktbABWE:ct+QbxgiwXYx8d0l4ikktkBWE","tlshash":"57b190d74a8bc7b4f14bac350bd5d56d6540b6117429eeb0d57dd4c944a08e60ffc0e8","first_seen":"2026-04-07T00:33:16.58394Z","last_seen":"2026-06-01T17:24:49.787852Z","times_seen":59,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.083Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.056Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:39 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.640Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-17ab\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x89, components 3","md5":"b7ea98efaf613249ef5f6d027d97eb94","sha1":"fb56316397e6b12fbbe30b85975bccba741b3e57","sha256":"baa68948496f7b28de9ea9c65cbfb883c381a6d9c5ed0c80792dde3c13f6e840","sha512":"e1b0a3f799d2beff2d6f62ad55a2aead53cebf21bec32bdab36c511932e087373ee2f8953e59ca6792c42b0c66e61c7e82c73f95d609f9dc87235883d373aee9","ssdeep":"96:/hEAQcn5ZPG5KBWaq8bRbaHtvdkf9Obvq1wiVkMziouddzpscE6OKAO1De2/Y52Z:/h7Qg3HJhwFZSRk3RDLACX/Mu","tlshash":"6dc1a02cfed243f46b6b4e72c68a07c593d24d11cc89490525b5d4e2af102ffb50650a","first_seen":"2026-04-07T00:33:16.575888Z","last_seen":"2026-06-01T17:24:49.766604Z","times_seen":60,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.661Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:40 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":741,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/saved_resource.html","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.626Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.774Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%BC%80%E6%88%B7%E4%BC%98%E6%83%A0-1-300x90.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1798\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x90, components 3","md5":"f2fa71ee26a3191c609a8d678d2c4535","sha1":"3ff30cdb000a6d08e2ebcc5442292488be4b7467","sha256":"386db202202f6d2e997685a1239a9453bf86c0127784326b5f3268d390a8b6cf","sha512":"34d28e7973d4be7d9f208cff363e07d74de362c09f8306f9bb60232faabe5d38cab742cf4734c294ab6e4dea0735816e3210feb88183e1889cbc3c78ea58a3b1","ssdeep":"96:/uEPw+nJDGvRU5wf0lhBiII7jLBZzwpyc5B5pxo4dRh:/uQw+nR5wYPRWjLBtGyCB5pbRh","tlshash":"96c19e916ba721d12c6b2ee24440321f0aa5cbb2b4770d112cbaf3e0dec28f2b916045","first_seen":"2026-04-07T00:33:16.594647Z","last_seen":"2026-06-01T17:24:49.779704Z","times_seen":59,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-150x150.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.778Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-150x150.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-e508\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b4c59da37dd7e7df930b8e82043a4038","sha1":"e793e9e0be6554e3e498c6c78af58cafd1cd7566","sha256":"d210195e4de6c230def5902892176764a100628965599c86907054eb75633e97","sha512":"57465a3b5d4ef2d8f4dd0fca5932218aef275fecc9afabab97d0a8c3aa35df6000d3f59cd5329d72f5f55152d2aebe41dae89b60e9feb62a94355c8d4506e753","ssdeep":"1536:rlHksS5mBuV07sCug4FEhsN+RwHLZ5mAsDlkmX:rlETmBuVmaee+OLZ8AsqmX","tlshash":"5043028a12cc034ec9739cc5745bbbabcf0a86cd10b9d5269853213c5be65e3abb5d18","first_seen":"2026-04-07T00:33:16.577744Z","last_seen":"2026-06-01T17:24:49.779017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":491,"dns":0,"connect":0,"send":0,"wait":263,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.115Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-17ab\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x89, components 3","md5":"b7ea98efaf613249ef5f6d027d97eb94","sha1":"fb56316397e6b12fbbe30b85975bccba741b3e57","sha256":"baa68948496f7b28de9ea9c65cbfb883c381a6d9c5ed0c80792dde3c13f6e840","sha512":"e1b0a3f799d2beff2d6f62ad55a2aead53cebf21bec32bdab36c511932e087373ee2f8953e59ca6792c42b0c66e61c7e82c73f95d609f9dc87235883d373aee9","ssdeep":"96:/hEAQcn5ZPG5KBWaq8bRbaHtvdkf9Obvq1wiVkMziouddzpscE6OKAO1De2/Y52Z:/h7Qg3HJhwFZSRk3RDLACX/Mu","tlshash":"6dc1a02cfed243f46b6b4e72c68a07c593d24d11cc89490525b5d4e2af102ffb50650a","first_seen":"2026-04-07T00:33:16.575888Z","last_seen":"2026-06-01T17:24:49.766604Z","times_seen":60,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.806Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.711Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.402Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-150x150.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.513Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-150x150.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-e508\"\r\nExpires: Thu, 25 Jun 2026 07:05:47 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b4c59da37dd7e7df930b8e82043a4038","sha1":"e793e9e0be6554e3e498c6c78af58cafd1cd7566","sha256":"d210195e4de6c230def5902892176764a100628965599c86907054eb75633e97","sha512":"57465a3b5d4ef2d8f4dd0fca5932218aef275fecc9afabab97d0a8c3aa35df6000d3f59cd5329d72f5f55152d2aebe41dae89b60e9feb62a94355c8d4506e753","ssdeep":"1536:rlHksS5mBuV07sCug4FEhsN+RwHLZ5mAsDlkmX:rlETmBuVmaee+OLZ8AsqmX","tlshash":"5043028a12cc034ec9739cc5745bbbabcf0a86cd10b9d5269853213c5be65e3abb5d18","first_seen":"2026-04-07T00:33:16.577744Z","last_seen":"2026-06-01T17:24:49.779017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":498,"dns":0,"connect":0,"send":0,"wait":259,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download-300x143.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.953Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download-300x143.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-272e\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced","md5":"25f182d0c103d66fe08335a8a6069eb9","sha1":"c89dc2f3a8b86667ffaacbe13def784505ef1a77","sha256":"9c28d4c2fee1cb56ad26e3ec4f7d220bb085ce9b01b3566f4d9641f17629682f","sha512":"a090570c28ea6c2e5fc7ac3f4169ed44151d866dcaad1603f57824ab3e9c3cdc9ff3bb5dd084978c3a67376868748b204b0166f6f61c6fceab5ed5dac51dbb35","ssdeep":"192:ZaWlve/X3Dvh65cJ3kP2pff7kB/eGUgSiveCXcHjqJrl5GrFHTO:Ztyzhkc+PiLO/rZmutGBy","tlshash":"b9229eabc3471d60f6e59c7686f66570eab7d6ca9149293c02f2ec42c1872272f46d13","first_seen":"2026-04-07T00:33:16.589443Z","last_seen":"2026-06-01T17:24:49.789873Z","times_seen":60,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":481,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.629Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:38 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":516,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.194Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:43 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.739Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:43 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.122Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":754,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.334Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:47 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.448Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.841Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.555Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.993Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-18fa\"\r\nExpires: Thu, 25 Jun 2026 07:05:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x137, components 3","md5":"bda8dee65c4436cfce83461895a2cc14","sha1":"db81b1825af6cd326eccc66907520a41a79289f9","sha256":"f2801e414b59ea92de9bce8bebbc1dab147634ffea4fd6259396fc17a6e9b7c1","sha512":"ab7a2c71c4a0c2a72f002d665cfe8961028e1ff4c4cf01af281147cdc047c7d26873186cdb618578eee7ed051ddcac10521857b49e1fc0cf7d74eb6be0307051","ssdeep":"192:sSgjKreC4OF/MiYQEIdmk5hdnhALChUe/swI:sSgjKejOV1Dkk5/hMCUekh","tlshash":"70d15bfc1ed95840c5d54fa83387ab6c14862ab8d1499c353a38da075bc70c26fc0b9d","first_seen":"2026-04-07T00:33:16.592659Z","last_seen":"2026-06-01T17:24:49.771058Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1560,"timings":{"blocked":1294,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.636Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-300x137.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-18fa\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x137, components 3","md5":"bda8dee65c4436cfce83461895a2cc14","sha1":"db81b1825af6cd326eccc66907520a41a79289f9","sha256":"f2801e414b59ea92de9bce8bebbc1dab147634ffea4fd6259396fc17a6e9b7c1","sha512":"ab7a2c71c4a0c2a72f002d665cfe8961028e1ff4c4cf01af281147cdc047c7d26873186cdb618578eee7ed051ddcac10521857b49e1fc0cf7d74eb6be0307051","ssdeep":"192:sSgjKreC4OF/MiYQEIdmk5hdnhALChUe/swI:sSgjKejOV1Dkk5/hMCUekh","tlshash":"70d15bfc1ed95840c5d54fa83387ab6c14862ab8d1499c353a38da075bc70c26fc0b9d","first_seen":"2026-04-07T00:33:16.592659Z","last_seen":"2026-06-01T17:24:49.771058Z","times_seen":60,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":191,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.651Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.479Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:40 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.491Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:41 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":494,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.051Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.766Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":754,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.351Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:47 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/download-300x143.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.645Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/download-300x143.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-272e\"\r\nExpires: Thu, 25 Jun 2026 07:05:40 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 143, 8-bit/color RGBA, non-interlaced","md5":"25f182d0c103d66fe08335a8a6069eb9","sha1":"c89dc2f3a8b86667ffaacbe13def784505ef1a77","sha256":"9c28d4c2fee1cb56ad26e3ec4f7d220bb085ce9b01b3566f4d9641f17629682f","sha512":"a090570c28ea6c2e5fc7ac3f4169ed44151d866dcaad1603f57824ab3e9c3cdc9ff3bb5dd084978c3a67376868748b204b0166f6f61c6fceab5ed5dac51dbb35","ssdeep":"192:ZaWlve/X3Dvh65cJ3kP2pff7kB/eGUgSiveCXcHjqJrl5GrFHTO:Ztyzhkc+PiLO/rZmutGBy","tlshash":"b9229eabc3471d60f6e59c7686f66570eab7d6ca9149293c02f2ec42c1872272f46d13","first_seen":"2026-04-07T00:33:16.589443Z","last_seen":"2026-06-01T17:24:49.789873Z","times_seen":60,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":486,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.756Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/GT_v2.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.098Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/GT_v2.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-387f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14463,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4879038fed3c2f29318adf0803ab18e","sha1":"5dffc36987a4a84735e6071b19aee98c707bbd90","sha256":"4f3cde86b31746c372ae9aa489feed42c71cb68c09ba1427159c270e48c6c272","sha512":"3dc319e75d1e44f4f5da93fdc7991fa8e1e9afeee705832667b534f883740917af5f326368f5c8661e990c82ef05f58d0dd5416ab217ce46c233d49f67adefa8","ssdeep":"384:4I3H0iLUv/iJ76FOgqc0HeMDNNWWAPQ+iWp2fAL:zLUv/iFJczMDNNWWAo+hka","tlshash":"4f52f8c6671041dc281f9fd2ae3f62f8232e64fbb76671cc14d6d98a61079f56906cc8","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675714Z","times_seen":217,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.936Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":231,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.953Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:48 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156d\"\r\nExpires: Thu, 25 Jun 2026 07:05:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x89, components 3","md5":"f5eaa6c6308b665b318e48ba2c4b406e","sha1":"9213ce66f703bfa9bc7bcb6ffb2835fd633f3b75","sha256":"02a68f4e1f2dc5856729ad22713b248b6e27258f560e366ee16187001919e6cf","sha512":"535153787886b33c0ccae551b4bb6fdd9365ec7923c73eba66e4d22937ceb580e8bb66e58418e19850530ff98f93dd7d9ba162fd557651624cb1549c3c644f92","ssdeep":"96:pQ/twD4eQiox/o9bQwxl9Kc8HV/8deJl4i9yrktbABWE:ct+QbxgiwXYx8d0l4ikktkBWE","tlshash":"57b190d74a8bc7b4f14bac350bd5d56d6540b6117429eeb0d57dd4c944a08e60ffc0e8","first_seen":"2026-04-07T00:33:16.58394Z","last_seen":"2026-06-01T17:24:49.787852Z","times_seen":59,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":481,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.733Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.620Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:37 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.088Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.204Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:43 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.102Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.757Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.113Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1fb3\"\r\nExpires: Thu, 25 Jun 2026 07:05:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x125, components 3","md5":"72df85960da057cc3d87eb23bc33702f","sha1":"9dba7062421bea7681cc82baeb7ba89862e51244","sha256":"0bbaed5102560a16f4ad3d2b3fc8473be95c21a63b6bb89249d50ba8c083b57a","sha512":"82c1a8fa9a1ff6b6fc92e02cb62bfafad1b9579b3c6db6e2821e6f4994c61285ede61c0fbecd43bef3bc3b60d7499254cc5e921564e13fccba5261877aeda820","ssdeep":"192:zQEHlpckPznsPWEtqlUVb3sTa3QkwV5Ok:akLnMbPb3sTaQ4k","tlshash":"36f1aec72705620ee4e00e71d356dcbe5a8cfa1512042b4fb2b5f656b1b24f2ab891cf","first_seen":"2026-04-07T00:33:16.580583Z","last_seen":"2026-06-01T17:24:49.788894Z","times_seen":59,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.644Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/accordion.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.192Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-226e\"\r\nExpires: Tue, 26 May 2026 19:05:34 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-07-24T14:32:48.524556Z","times_seen":3456,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":464,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/4d539ac1527114377bfc3e5598db80fd.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.849Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/4d539ac1527114377bfc3e5598db80fd.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/ico.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.851Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/ico.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-47e\"\r\nExpires: Tue, 26 May 2026 19:05:37 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"78ced472c39ea826ef4c037f113d32a1","sha1":"c49391f4bea7109c7b0bc25a46f8d8802eccdf24","sha256":"547754129cd87bd3f2d6a890a128dee88f0bd1206e2505f6547ed0bf1370606d","sha512":"0a32eace2130d506ec94fb8ceb29806d2eccfbd682f743459d9c280a73571cf9e4343b93caf1e878f726997d1d5b59ead9f7e081828ef1128d4026f880ea0e17","ssdeep":"","tlshash":"8d317c8b52cd6f2ac619c3fdce83ae441224e759cf964bc79010a09e3d16ee8db4d5c8","first_seen":"2025-04-08T10:49:24.938652Z","last_seen":"2026-06-02T13:43:58.27191Z","times_seen":146,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.470Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.057Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":747,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.762Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.776Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156d\"\r\nExpires: Thu, 25 Jun 2026 07:05:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x89, components 3","md5":"f5eaa6c6308b665b318e48ba2c4b406e","sha1":"9213ce66f703bfa9bc7bcb6ffb2835fd633f3b75","sha256":"02a68f4e1f2dc5856729ad22713b248b6e27258f560e366ee16187001919e6cf","sha512":"535153787886b33c0ccae551b4bb6fdd9365ec7923c73eba66e4d22937ceb580e8bb66e58418e19850530ff98f93dd7d9ba162fd557651624cb1549c3c644f92","ssdeep":"96:pQ/twD4eQiox/o9bQwxl9Kc8HV/8deJl4i9yrktbABWE:ct+QbxgiwXYx8d0l4ikktkBWE","tlshash":"57b190d74a8bc7b4f14bac350bd5d56d6540b6117429eeb0d57dd4c944a08e60ffc0e8","first_seen":"2026-04-07T00:33:16.58394Z","last_seen":"2026-06-01T17:24:49.787852Z","times_seen":59,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":490,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.550Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.232Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E8%B6%B3%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-17ab\"\r\nExpires: Thu, 25 Jun 2026 07:05:38 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x89, components 3","md5":"b7ea98efaf613249ef5f6d027d97eb94","sha1":"fb56316397e6b12fbbe30b85975bccba741b3e57","sha256":"baa68948496f7b28de9ea9c65cbfb883c381a6d9c5ed0c80792dde3c13f6e840","sha512":"e1b0a3f799d2beff2d6f62ad55a2aead53cebf21bec32bdab36c511932e087373ee2f8953e59ca6792c42b0c66e61c7e82c73f95d609f9dc87235883d373aee9","ssdeep":"96:/hEAQcn5ZPG5KBWaq8bRbaHtvdkf9Obvq1wiVkMziouddzpscE6OKAO1De2/Y52Z:/h7Qg3HJhwFZSRk3RDLACX/Mu","tlshash":"6dc1a02cfed243f46b6b4e72c68a07c593d24d11cc89490525b5d4e2af102ffb50650a","first_seen":"2026-04-07T00:33:16.575888Z","last_seen":"2026-06-01T17:24:49.766604Z","times_seen":60,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.309Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/qr-code-5-150x150.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.411Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/qr-code-5-150x150.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-e508\"\r\nExpires: Thu, 25 Jun 2026 07:05:43 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"b4c59da37dd7e7df930b8e82043a4038","sha1":"e793e9e0be6554e3e498c6c78af58cafd1cd7566","sha256":"d210195e4de6c230def5902892176764a100628965599c86907054eb75633e97","sha512":"57465a3b5d4ef2d8f4dd0fca5932218aef275fecc9afabab97d0a8c3aa35df6000d3f59cd5329d72f5f55152d2aebe41dae89b60e9feb62a94355c8d4506e753","ssdeep":"1536:rlHksS5mBuV07sCug4FEhsN+RwHLZ5mAsDlkmX:rlETmBuVmaee+OLZ8AsqmX","tlshash":"5043028a12cc034ec9739cc5745bbbabcf0a86cd10b9d5269853213c5be65e3abb5d18","first_seen":"2026-04-07T00:33:16.577744Z","last_seen":"2026-06-01T17:24:49.779017Z","times_seen":59,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":267,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.575Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":492,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.805Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.107Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.517Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:47 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":759,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.345Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.967Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-15601\"\r\nExpires: Tue, 26 May 2026 19:05:36 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T14:51:17.078446Z","times_seen":988781,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":256,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.238Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:39 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":767,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.548Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.514Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-300x149.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":503,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/d8916c785ed8a72badc13eb88cbcb3de.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.177Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/d8916c785ed8a72badc13eb88cbcb3de.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-95d8\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x304, components 3","md5":"384c736e3b5cf24c9852281f0e8c1b36","sha1":"d75736ee60e342a60225c563532f9b61961e5065","sha256":"adae21bcb8a01392144dfa760257649cefadc6d9cc6966a89a970d7b1337bc21","sha512":"ec22a832105fc161e8b745675650136f5c7bbfcc8907074d69461429101ce513d47d157bd04f5be578d3d01d66a32456a311af06e0083fe21cecb898329353f4","ssdeep":"768:G+ckdTY7SknWhcccGChMBxrQaE2HrgZQRhO+RsrdmTvoL1yQVPhK02lPo:G9kRYhW9ChC22HrgZKO+qcTq1DVqo","tlshash":"6d03f14d122bc35a50198c273bc5cd26d7a5bff9c2d8a5859cf085b3a4aeac5dce00e7","first_seen":"2024-08-19T13:49:37.61635Z","last_seen":"2026-06-01T22:46:44.077177Z","times_seen":150,"resource_available":false,"data":null}},"time_used":1796,"timings":{"blocked":1530,"dns":0,"connect":0,"send":0,"wait":264,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.206Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:38 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.039Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.061Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:39 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":502,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.049Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%AF%AE%E7%90%83%E4%BC%98%E6%83%A0-300x89.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-156d\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5485,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x89, components 3","md5":"f5eaa6c6308b665b318e48ba2c4b406e","sha1":"9213ce66f703bfa9bc7bcb6ffb2835fd633f3b75","sha256":"02a68f4e1f2dc5856729ad22713b248b6e27258f560e366ee16187001919e6cf","sha512":"535153787886b33c0ccae551b4bb6fdd9365ec7923c73eba66e4d22937ceb580e8bb66e58418e19850530ff98f93dd7d9ba162fd557651624cb1549c3c644f92","ssdeep":"96:pQ/twD4eQiox/o9bQwxl9Kc8HV/8deJl4i9yrktbABWE:ct+QbxgiwXYx8d0l4ikktkBWE","tlshash":"57b190d74a8bc7b4f14bac350bd5d56d6540b6117429eeb0d57dd4c944a08e60ffc0e8","first_seen":"2026-04-07T00:33:16.58394Z","last_seen":"2026-06-01T17:24:49.787852Z","times_seen":59,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":501,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.056Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:41 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":742,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.203Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:43 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.185Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":3110,"timings":{"blocked":2847,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.761Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1084,"timings":{"blocked":824,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.625Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.476Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:40 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.188Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.208Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:43 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.547Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:44 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:44 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:44.559Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:45 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.372Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.024Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:36 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":740,"timings":{"blocked":477,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.012Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/saved_resource.html","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.346Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.928Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:47.281Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:47 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/lazysizes.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.189Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2655\"\r\nExpires: Tue, 26 May 2026 19:05:34 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-24T15:15:34.989818Z","times_seen":12425,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":220,"dns":1,"connect":262,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.320Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/saved_resource.html\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.492Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.035Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:39 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.185Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":2808,"timings":{"blocked":2553,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/dyts.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.958Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/analytics.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.964Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nLocation: http://ku-football.bet/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.020Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:36 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":462,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:45.915Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:46 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.230Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/bet365-logo.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.630Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/bet365-logo.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-145f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95ccba9bed15ed9fb0a3e92f9b305606","sha1":"968345b2f0a25d22b66f9f13047c5c7d3667615b","sha256":"67e577db53f8bb6bb309e6d168e605fd9f1228eb9bc70d5b9790f84ec5a58e4a","sha512":"51682500e25adb7dc926f191abe8abae71c736c22e13949b64b299382a10031d3b0cf4bb256b8996c915f049a3d5419493e94910bc6be00d251370d2cb785507","ssdeep":"96:9Zn3wrGMefjh3vZnbh7eK1LEAmicpbACeI1zCsp+g4FCu2cF/G590Q8RF2k:TneB8bbh7j1LDopbmwCOPuK90Dj","tlshash":"e5b1d9b5133d66fcf42083989b63a0827c9928fb77d2c15cd545af4963721f9406e9e3","first_seen":"2024-08-19T15:30:08.155728Z","last_seen":"2026-06-01T22:46:44.126266Z","times_seen":145,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.635Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":530,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:46.174Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:46 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/jquery-migrate.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.168Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-3509\"\r\nExpires: Tue, 26 May 2026 19:05:35 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T14:51:17.03863Z","times_seen":906850,"resource_available":true,"data":null}},"time_used":998,"timings":{"blocked":743,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/692c5823d4f13ebc85ae5fefea866984.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.175Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/692c5823d4f13ebc85ae5fefea866984.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-ae08\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x426, components 3","md5":"7a5c1a80214fe1534ecb22da26aaa2db","sha1":"ff660b6051afaba2bb47577c1d2de126fbba6d20","sha256":"f05e8de510cc78804e555019240302c2e93ea20f5459157581b39d9dfeab0671","sha512":"b09bfb81776f60cc7fd70d56a570028bd27120391a02a87498ecf2dafd5a885a34a2ddd221a03a06fdfad41ae7fb449e29177592282b7341da179af618753140","ssdeep":"768:ctF/q5Jwbq8A4ooymYE9ONe+HjMJDq7qzeZjFyEA19Q92FAshFgPW4J:ykLwbHKDE9Ue+HjEq72eDyEc9jFVhF8N","tlshash":"8513e139f903f485d86809f640ada2ee2c92e8ce59559e518e74f0f8bec4c9911b0c7e","first_seen":"2025-04-11T10:55:28.004256Z","last_seen":"2026-06-01T22:46:44.131219Z","times_seen":144,"resource_available":false,"data":null}},"time_used":1527,"timings":{"blocked":1008,"dns":0,"connect":0,"send":0,"wait":260,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.023Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:36 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":467,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/3759d45a64f891606dbf73924d5fd69c.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.746Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/3759d45a64f891606dbf73924d5fd69c.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-2b5b\"\r\nExpires: Thu, 25 Jun 2026 07:05:36 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"0bcde1c81ba5eff472b94018ae4a4697","sha1":"88e6df65495b7f949f0f441685707deb5a2f81c0","sha256":"7cdc3f42b26ef03c1923c5d725dd542378a0ac9e12f1da9050a2cbf8e35cf89a","sha512":"1ddb3361b2eb5f381dc1d42bdcde4570618d6185e7a916b190eca8604c2b75f851d6c8cdef2fdf2114c604369cd674288d335351d4a484471437e1012f53801f","ssdeep":"192:7BOllDujjKZd4DeQyECAwI4RyGC8v/SzsiOq7ghM77SHXrIxNL2quea3HtW:tOlIQdQeQynI4Ry+/8Oq71q30tuecW","tlshash":"6432af94c193e85cbecd6425cee0b704782b44e44be4f977136ad4d0f453b52b988211","first_seen":"2025-04-11T10:55:28.00215Z","last_seen":"2026-06-01T22:46:44.130587Z","times_seen":146,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/IBAS.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.760Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/IBAS.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:37 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1170\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f0aeb3eff9cba8ff114bf5e2a053b","sha1":"1cf8bdeaa684a434d4c33b28e231803db95e4d90","sha256":"69fa3593da6a1b69c2a7157082ce5ac3c7d51f84f9d0360b8cb263eede545a9b","sha512":"cdfb19bf50b8ca8e0a7671715f92523ef24dbac3c25d859a40768224485ca130d5341e3a02c14b1fb90ec233149792613ac253cdafabe00087b50afb69398f4f","ssdeep":"96:vNhMs9jImYFbXqqFA6NYJY36NYJY16NYJYtFK6O1ytKdi2/:vTMs90mMqqa6NEY36NEY16NEYiX1yn0","tlshash":"b79141c96730976d1ecbdb4ddf6ba594a20fc1ecb83798845b8e9e00d44b996f11ac80","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.66705Z","times_seen":215,"resource_available":false,"data":null}},"time_used":1086,"timings":{"blocked":824,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.231Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Bet365%E7%BA%BF%E4%B8%8A%E6%89%91%E5%85%8B%E6%B8%B8%E6%88%8F-300x125.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1fb3\"\r\nExpires: Thu, 25 Jun 2026 07:05:38 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x125, components 3","md5":"72df85960da057cc3d87eb23bc33702f","sha1":"9dba7062421bea7681cc82baeb7ba89862e51244","sha256":"0bbaed5102560a16f4ad3d2b3fc8473be95c21a63b6bb89249d50ba8c083b57a","sha512":"82c1a8fa9a1ff6b6fc92e02cb62bfafad1b9579b3c6db6e2821e6f4994c61285ede61c0fbecd43bef3bc3b60d7499254cc5e921564e13fccba5261877aeda820","ssdeep":"192:zQEHlpckPznsPWEtqlUVb3sTa3QkwV5Ok:akLnMbPb3sTaQ4k","tlshash":"36f1aec72705620ee4e00e71d356dcbe5a8cfa1512042b4fb2b5f656b1b24f2ab891cf","first_seen":"2026-04-07T00:33:16.580583Z","last_seen":"2026-06-01T17:24:49.788894Z","times_seen":59,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":191,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.312Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/saved_resource.html","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.893Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/menu.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.852Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b3f\"\r\nExpires: Tue, 26 May 2026 19:05:42 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-07-23T09:24:41.650445Z","times_seen":2522,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":492,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/18.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:42.405Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/18.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-45f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b66439064824a50a30424019b23dcc4a","sha1":"fa915ffe798c9e07013cc3d7422b848a879c16b4","sha256":"f6a909e4d092102e9c5392aa344181102ab8116b43ba88f316fc4544fb482e06","sha512":"013f940871588c259a5060e492da84090b198367b618061c1ec1664c637c446ba7063a85401a772d8f039d7fd2105c64055509f069a570192d9e3a063e24bf16","ssdeep":"","tlshash":"ab2100c2a250b5b925dc9b36df29f428216b70e202b8cd856bf49fc1d1c3b92fd0c908","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.675182Z","times_seen":215,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":525,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.162Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-394e7\"\r\nExpires: Tue, 26 May 2026 19:05:34 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"8f98b351aeab0a3a08d5e162e9afe080","sha1":"0c42034dced27fd01b4902c83e3c4f219b7a51a3","sha256":"1b1d1901e435c6094d4d083928286a17e737939113180f66e024f7f72cc744e2","sha512":"d77a2b456c80233779a358352a77043b2a518aa73190f204312252b93ef3899961f35f39956e64423e4b061a2b9427bc175cfed0b391e5f7983725915db3f57b","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzaOifqoeSt:Yk2u5SOV+UQ3Zo/0kPlQPOifqoeSt","tlshash":"1a34c6325796c8fc377b83369c446264928bd682cb468feef43bd16491c858529b3f39","first_seen":"2025-04-11T10:55:28.021106Z","last_seen":"2026-06-01T22:46:44.083411Z","times_seen":146,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/images/a69f751bd691f3b8acd88747c6bbcdca.jpg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.178Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/a69f751bd691f3b8acd88747c6bbcdca.jpg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-8d14\"\r\nExpires: Thu, 25 Jun 2026 07:05:36 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36116,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x303, components 3","md5":"292d5fe61c8c475fafc672526155f229","sha1":"008af8c9285c801d42297ed4ba35f2792d45fa13","sha256":"0f8d6ad52fd85f2d9ec1482313252673fe083f5cdbdeed5186d4b00a976a1890","sha512":"93d2291eae2c8fcbe60ad51f6dbffd9ab7ed51ceec3c13167dfc9a29f74bd921549127cccade2d8f0e375d91404d92a99ba4dd76aafab9b740bf9b5ca6492942","ssdeep":"768:MRfh2dTEBrUhUg/F8hgu3dFMyBNYuVLisiYHZgRqbvi5w6P4JTzyTz5:Mfh2dQBrG9/433MsVLisi+ZdEP4JTct","tlshash":"b2f2f1932553f078aae95ead2c305b83d701aff6d2e825572bb4e5360ca52ec1fe7101","first_seen":"2025-04-11T10:55:28.013819Z","last_seen":"2026-06-01T22:46:44.087184Z","times_seen":144,"resource_available":false,"data":null}},"time_used":2268,"timings":{"blocked":1752,"dns":0,"connect":0,"send":0,"wait":258,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:34.190Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:34 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":220,"dns":1,"connect":265,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:36.233Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ku-football.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:36 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 12 May 2026 19:56:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a038605-e3f4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (931)","md5":"69f33e32150e628e32f2afe647cc5b1d","sha1":"2241424a12e1d0318167818eb277b9bea40e3881","sha256":"5d059f18cf96b45a320968734e0e87dc3853e398190738ad7f8c232320e2ff3f","sha512":"f78909711a748d77cf511d25ad1603cd5ac9660a675371434fcb786e0dca75f5fbed2365b91d6c49fb60cf84811f5d80150a0500b91ca4bbbeac3e579e4aef74","ssdeep":"1536:LYFINbcFMuOW4eRMLAgc2s5Agc2sb2i5TstRMdb:7eFVD/MLAgc2WAgc2U2iGtSR","tlshash":"7e4308a6759f3cbf150662ca621873ac759f8c74eb2048c2f2bfc1c522f9e64642f165","first_seen":"2026-05-25T08:03:40.862365Z","last_seen":"2026-05-26T07:06:29.696881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.662Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-1b50\"\r\nExpires: Thu, 25 Jun 2026 07:05:40 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.441565Z","times_seen":490,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":747,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/Gibraltar.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.040Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/Gibraltar.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:41 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-5a36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23094,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afd15f762903c755bd65cc178fa04fad","sha1":"14032a045f69b7921523521101d9f94232bd6d56","sha256":"1eadce24b5faef4d33d36ed5dd7ea39a192ac846b6c677c9b123dcdb64f87b37","sha512":"f5b08d90c79ef70a74b1dda6143de5c6f38dc6127b28632de4e5e4448a08fb4762534c4cd9ddc435a39f48de2b85e9f5679e2708a4b4fc3f40c2810c5b716c5a","ssdeep":"384:kp/AOtZaY9qHwooiwQeCk2257Y9wSapwfQkvHbkaSGa4dKSJnADUd/R2:oXJ9r94eDHWWpWvHbkaSGa4dVmww","tlshash":"f9a204ca2170938ce8cde65e97aaedd0425e60deb472d8c14eef879c640f984ff15498","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.677214Z","times_seen":217,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:35.222Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:35 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-189b\"\r\nExpires: Thu, 25 Jun 2026 07:05:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-07-22T17:50:17.453922Z","times_seen":487,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:37.628Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:38 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":516,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/InternationalBettingIntegrity.svg","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:38.215Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/InternationalBettingIntegrity.svg HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:38 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-66b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a026a426d9cc0aa82215932addf45b39","sha1":"505fe3007bd1a7eab466a05a2040ec07292623cd","sha256":"a7617073a9501e9c61219182b6c41b33390d41ff6e63dd39cf557f0cd2a0be9e","sha512":"56fc34e93b8b5ec9716d6a80f473c9b54a4f35b5d33f60ca8b4c2772958fe4c0bdcb97ebcdfbd7c7d0cda797ab57bfd3e0bf2c4a0767bdeee26cf94fbc602b56","ssdeep":"384:siKbYg7GRL48u9Us59TfKh78ZA8TGdfetdrdEtdc907e:eYKl8uWs7TfggZVAeGtdW07e","tlshash":"6bc220e6176093dc5bcacc5eef23a8a4930f90b979b6f9d15d5f8b28544b988f207c10","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-07-23T09:24:41.655472Z","times_seen":217,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":466,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:39.058Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:39 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 111\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nConnection: keep-alive\r\nETag: \"69bf1f7e-6f\"\r\nExpires: Tue, 26 May 2026 19:05:39 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-07-23T09:24:41.676706Z","times_seen":520,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":498,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:40.480Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:40 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:40 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.851Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-131f\"\r\nExpires: Tue, 26 May 2026 19:05:42 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-07-23T09:24:41.669248Z","times_seen":531,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":253,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/core.min.js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:41.848Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:42 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 21 Mar 2026 22:45:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69bf1f7e-53be\"\r\nExpires: Tue, 26 May 2026 19:05:42 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-24T14:32:48.495901Z","times_seen":45422,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":235,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ku-football.bet/files/js","fqdn":"ku-football.bet","domain":"ku-football.bet","tld":"bet"},"ip":{"addr":"156.250.97.74","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ku-football.bet/","date":"2026-05-26T07:05:43.731Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: ku-football.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ku-football.bet/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 26 May 2026 07:05:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 508\r\nConnection: keep-alive\r\nETag: \"6a04b417-1fc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e2a918c5ccfd642966a83537751a314","sha1":"dc9da5cc68b3931cd6d5d8d015df20d188de7960","sha256":"bf958c2825f74662d9ca881d473f5c6f907dc997869238cc7735adc4115d8cad","sha512":"c38c5a677dca2eb4b1d5602d5f8e60d41c555d643e907bc688936e0e2c2670bc65c8095f61294bdebe0c822d956261a80be37d84cbe343c8a89873fcd05e6a6f","ssdeep":"","tlshash":"a1f00e620cc0090d11a313a86bf3f0aeff72089770048120f1cc394a1f54f0e82037d5","first_seen":"2026-05-16T14:20:54.623091Z","last_seen":"2026-07-20T05:00:58.735726Z","times_seen":29,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"ku-football.bet","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ku-football.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}