GET www.manbetx.uk/img/btn1.ac7dcb07.png
172.67.189.141200 OK 74 kB URL GET www.manbetx.uk/img/btn1.ac7dcb07.png
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type PNG image data, 800 x 260, 8-bit/color RGBA, non-interlaced
Hash ac7dcb07f8e9d9f01499a8329c638beb
69eff05de60b033b42592ae78d1df26ee89fd80e
16c3c5265ad98e21747e456213c780418206eccb9f9ca43b59cd561f40b49f1c
GET /img/btn1.ac7dcb07.png HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/css/chunk-815e9064.38a5a07a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:26 GMT
content-type: image/png
content-length: 73836
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kiq0iOfhOfYQmb3G5cFEVdCXWBoGXgtK2Sp0xuoaTZTTyUdUj9K2vWi21EKna3Lom0hBGyHbIW7wNdeG4rEafge63%2BZrxnc65BBsFFBSmuzSJxyMt8V1Ex%2BrmY5tFBUQ%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
etag: "6839b7db-1206c"
expires: Sun, 29 Jun 2025 16:57:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
cf-cache-status: EXPIRED
cf-ray: 947fc53e89fcb518-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3678&min_rtt=1064&rtt_var=3619&sent=131&recv=99&lost=0&retrans=0&sent_bytes=70313&recv_bytes=7788&delivery_rate=13783193&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=e5882be3f0f91900&ts=2731&x=80"
GET static-content-cn.wb27jlt6u066.com:9587/js/livechat.js?202010021
103.197.58.87200 OK 478 B URL GET static-content-cn.wb27jlt6u066.com:9587/js/livechat.js?202010021
IP 103.197.58.87:9587
ASN #45352 IP ServerOne Solutions Sdn Bhd
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerSectigo Limited
Subjectstatic-content-cn.wb27jlt6u066.com
Fingerprint00:89:62:01:8C:5E:2B:CC:B2:4B:4B:07:7A:17:E7:1F:09:CA:1A:05
ValidityFri, 18 Oct 2024 00:00:00 GMT - Sat, 18 Oct 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (477)
Hash c391a4be2c99c7964fba820f219cfd2c
a6f5c3e2febea4e66d7a2ef18bddd4f79e30f59e
9609ff5f295a5b01039dcec7a3368350adf5f810a811ef40f8021a5f10ac6a67
GET /js/livechat.js?202010021 HTTP/1.1
Host: static-content-cn.wb27jlt6u066.com:9587
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 May 2025 16:57:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 20 Jul 2022 18:47:52 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62d84dd8-1de"
Expires: Fri, 30 May 2025 19:57:20 GMT
Cache-Control: max-age=10800
Conexiq-CDN-Cache: HIT
Content-Encoding: gzip
GET www.manbetx.uk/js/chunk-vendors.163d5d6a.js
172.67.189.141200 OK 162 kB URL GET www.manbetx.uk/js/chunk-vendors.163d5d6a.js
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type JavaScript source, ASCII text, with very long lines (57838)
Size 162 kB (161831 bytes)
Hash c5ac040c0ccf4622b9422323ee67ba2e
b52b7e324d4e1365e14762645c2cfb358caa6758
303882692097c9e217b8e9c6f68afbad0bee32cf58fb5996e0ee7165aca0a868
GET /js/chunk-vendors.163d5d6a.js HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WxPzOzfAQ5%2FpDiu%2FLsAqXTBFZNCd8qgnW2wpREn6uTsugpPyDVYetALKqdQhcXOyG7cQTABU1qmUxS7IuAQbvyKd6GaxxVGBKuGoo%2BOoBDMMsbOlacoS9rj8k5OsqPazyw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
vary: Accept-Encoding
etag: W/"6839b7db-27827"
expires: Fri, 06 Jun 2025 16:57:24 GMT
cache-control: max-age=604800
content-encoding: gzip
cf-cache-status: EXPIRED
cf-ray: 947fc53329b1b518-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8250&min_rtt=1064&rtt_var=6610&sent=63&recv=82&lost=0&retrans=0&sent_bytes=6504&recv_bytes=5039&delivery_rate=256446&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=e5882be3f0f91900&ts=941&x=80"
GET www.manbetx.uk/js/chunk-815e9064.92ce1b10.js
172.67.189.141200 OK 3.7 kB URL GET www.manbetx.uk/js/chunk-815e9064.92ce1b10.js
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type JavaScript source, ASCII text, with very long lines (3720), with no line terminators
Hash 8ecfc4d580fbd048a621eaf54b598f82
583c446823a974b867a7d0cd9a22ea76945ebf93
30d78acb1a415fdaa8aa070ec09bb9853bdf834aeff49438f29fc17a04d99fbf
GET /js/chunk-815e9064.92ce1b10.js HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Cookie: Hm_lvt_2f60ef41d26337acc7101bc632659fac=1748624246; Hm_lpvt_2f60ef41d26337acc7101bc632659fac=1748624246; HMACCOUNT=5668B28331685D1B
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CBAG3ZXUUTok3wCmPnzOFVX4VUdxrfSwDCaQW8z8XNX0QxVjcwsVFcY%2BnYw73CmI3p%2FAhKPD2FSu%2FP2hhQ2Lsb%2FNRLSdwS9llGfFQnFE0lNqHFweCWp8zflhRcxp1HzuTw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
vary: Accept-Encoding
etag: W/"6839b7db-e88"
expires: Fri, 06 Jun 2025 16:57:25 GMT
cache-control: max-age=604800
content-encoding: gzip
age: 2
cf-cache-status: HIT
cf-ray: 947fc54ccb51b518-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5441&min_rtt=1064&rtt_var=3790&sent=1766&recv=118&lost=55&retrans=56&sent_bytes=2017363&recv_bytes=9452&delivery_rate=41443225&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=336840&unsent_bytes=0&cid=e5882be3f0f91900&ts=4461&x=80"
GET www.manbetx.uk/img/bg.6024d503.jpg
172.67.189.141200 OK 668 kB URL GET www.manbetx.uk/img/bg.6024d503.jpg
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Size 668 kB (668048 bytes)
Hash 6024d50399c7ec6bba1d240b74b250a3
0bd0df3bb6a2b31738a5c5dc5f60a90c8ff4bd13
2d7b08f7b0d3c9b6f56611e1835a77ae1ec252848a5716f011581e9a6f2c44f0
GET /img/bg.6024d503.jpg HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/css/chunk-815e9064.38a5a07a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:26 GMT
content-type: image/jpeg
content-length: 668048
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GGdKn2uPboJIsy50NPjq3LEyq0DeKjd5r01vKb64M375ZoCa9V1SauBGogv7ZhML66y%2FeNKaRBXECXWSv%2BhBaJepaaa9LctxY6x34pKCvFs7gzRXY395KjMoQBRzwrzXhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
etag: "6839b7db-a3190"
expires: Sun, 29 Jun 2025 16:57:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
cf-cache-status: EXPIRED
cf-ray: 947fc53e79fbb518-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3963&min_rtt=1064&rtt_var=4066&sent=130&recv=98&lost=0&retrans=0&sent_bytes=69630&recv_bytes=7744&delivery_rate=13783193&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=e5882be3f0f91900&ts=2724&x=80"
GET www.manbetx.uk/css/app.80affa93.css
172.67.189.141200 OK 1.4 kB URL GET www.manbetx.uk/css/app.80affa93.css
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type ASCII text, with very long lines (1392), with no line terminators
Hash 05ed8f41683172fafc5160c7f8d2d53d
f6e44d08068c420b89adeb333ed90a54ce1f6546
9ae0d0c373e296c1186b72195222f0ca1bb1af366822b2371e6f749be85dbb57
GET /css/app.80affa93.css HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 30 May 2025 16:57:24 GMT
content-type: text/css
server: cloudflare
last-modified: Fri, 30 May 2025 13:51:23 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"6839b7db-570"
expires: Fri, 06 Jun 2025 16:57:24 GMT
cache-control: max-age=604800
content-encoding: gzip
cf-cache-status: EXPIRED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Hx5fr6qQVSA%2Fgx8WdQ5EoSoXtZsR%2Bol5DPbJSp39HDzEYA4YfwkZ%2BoO34cGeBzKjs82lJceJHg9SyYIXNrgKzGC0qWb83IIJy7DVhA%3D%3D"}]}
cf-ray: 947fc5332c31b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.manbetx.uk/js/chunk-815e9064.92ce1b10.js
172.67.189.141200 OK 3.7 kB URL GET www.manbetx.uk/js/chunk-815e9064.92ce1b10.js
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type JavaScript source, ASCII text, with very long lines (3720), with no line terminators
Hash 8ecfc4d580fbd048a621eaf54b598f82
583c446823a974b867a7d0cd9a22ea76945ebf93
30d78acb1a415fdaa8aa070ec09bb9853bdf834aeff49438f29fc17a04d99fbf
GET /js/chunk-815e9064.92ce1b10.js HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:25 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hVSpmg4GsorM01Ieuf%2F65oGV1N%2BeEl365A%2FG0Fvfo5KPjLsY641ojEanp7stE%2FD2BmdKB0aFFLp0Y5c2B9XtncrIxNoyHf4sqxLUqs%2B%2B80SqLF1%2BQitlRAmWwaxxjau0MQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
vary: Accept-Encoding
etag: W/"6839b7db-e88"
expires: Fri, 06 Jun 2025 16:57:25 GMT
cache-control: max-age=604800
content-encoding: gzip
cf-cache-status: MISS
cf-ray: 947fc53ac9e6b518-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4762&min_rtt=1064&rtt_var=4759&sent=120&recv=91&lost=0&retrans=0&sent_bytes=65372&recv_bytes=6139&delivery_rate=13783193&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=e5882be3f0f91900&ts=2142&x=80"
GET www.9pe8ul.com:51300/global-activity-entry/js/rain-icon.js
20.2.196.30200 OK 35 kB URL GET www.9pe8ul.com:51300/global-activity-entry/js/rain-icon.js
IP 20.2.196.30:51300
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerZeroSSL
Subjectwww.9pe8ul.com
Fingerprint89:12:E2:15:4E:F2:20:9A:07:7F:B5:F9:78:22:39:9B:B3:8D:BF:E3
ValiditySun, 18 May 2025 00:00:00 GMT - Sat, 16 Aug 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text
Hash 59767c53c4cb277425bce5c5e7ea9d41
36ee5b49ceb915d4369fe92ca49dbd8bba702c96
5b43bfa813b9f48656d868fbdacd693bf7fc0f4324d5b815db42ceb80c5a4a27
GET /global-activity-entry/js/rain-icon.js HTTP/1.1
Host: www.9pe8ul.com:51300
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 30 May 2025 16:57:20 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 09 Nov 2023 07:48:38 GMT
vary: Accept-Encoding
etag: W/"654c8ed6-88a9"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
psc-cache-status: HIT
X-Firefox-Spdy: h2
GET static-content-cn.wb27jlt6u066.com:9587/util/rsa.js
103.197.58.87200 OK 14 kB URL GET static-content-cn.wb27jlt6u066.com:9587/util/rsa.js
IP 103.197.58.87:9587
ASN #45352 IP ServerOne Solutions Sdn Bhd
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerSectigo Limited
Subjectstatic-content-cn.wb27jlt6u066.com
Fingerprint00:89:62:01:8C:5E:2B:CC:B2:4B:4B:07:7A:17:E7:1F:09:CA:1A:05
ValidityFri, 18 Oct 2024 00:00:00 GMT - Sat, 18 Oct 2025 23:59:59 GMT
File type ASCII text, with very long lines (5026)
Hash 2e28749b1ce6013a456d4498a447dff3
89d8c436922a84f097e86090179d112c3d6e13c2
1748bdff25c71702d781b076f961920ef32283e324153b256e963202431a35ba
GET /util/rsa.js HTTP/1.1
Host: static-content-cn.wb27jlt6u066.com:9587
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 May 2025 16:57:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 20 Jul 2022 18:47:53 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62d84dd9-34ca"
Expires: Fri, 30 May 2025 19:57:20 GMT
Cache-Control: max-age=10800
Conexiq-CDN-Cache: HIT
Content-Encoding: gzip
GET www.manbetx.uk/img/bc.dc80893f.jpg
172.67.189.141200 OK 944 kB URL GET www.manbetx.uk/img/bc.dc80893f.jpg
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1242x2208, components 3
Size 944 kB (943514 bytes)
Hash dc80893ff7fc07b290492fa7db14796c
420cda9af85db44f132884d38bcfac5c3957a2a7
ddc4432c9a3da2e673bc1eb2bf3c971bd321e838d5b236f7fe42efe7af7249aa
GET /img/bc.dc80893f.jpg HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:26 GMT
content-type: image/jpeg
content-length: 943514
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PomDjwy5liVFhicPnbzZHphCSwR93vbOBFRpcgZsL76wgc333vu7LMniEDzyEythmWT9gn7c30LtpjPqrDl%2FEyLLWxYdR6sY%2Fv2hvINklELkFphiFa6F2PaljtxyLF5R9g%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
etag: "6839b7db-e659a"
expires: Sun, 29 Jun 2025 16:57:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
cf-cache-status: EXPIRED
cf-ray: 947fc53e79f7b518-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3963&min_rtt=1064&rtt_var=4066&sent=129&recv=98&lost=0&retrans=0&sent_bytes=68947&recv_bytes=7744&delivery_rate=13783193&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=e5882be3f0f91900&ts=2723&x=80"
GET static-content-cn.wb27jlt6u066.com:9587/js/game/Game.js?20220202
103.197.58.87200 OK 63 kB URL GET static-content-cn.wb27jlt6u066.com:9587/js/game/Game.js?20220202
IP 103.197.58.87:9587
ASN #45352 IP ServerOne Solutions Sdn Bhd
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerSectigo Limited
Subjectstatic-content-cn.wb27jlt6u066.com
Fingerprint00:89:62:01:8C:5E:2B:CC:B2:4B:4B:07:7A:17:E7:1F:09:CA:1A:05
ValidityFri, 18 Oct 2024 00:00:00 GMT - Sat, 18 Oct 2025 23:59:59 GMT
Hash acaab89d99ec8834af5b451e81f9c201
df62de5dc78b0b6e115dc5d0f53edfc76b71fdc4
9bac381ad42db61b1ffd4ffe2d588c1313b1a8531c6c0223038ea454af0d00da
GET /js/game/Game.js?20220202 HTTP/1.1
Host: static-content-cn.wb27jlt6u066.com:9587
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 May 2025 16:57:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 13 Jan 2025 05:02:35 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"67849e6b-f4d1"
Expires: Fri, 30 May 2025 19:57:20 GMT
Cache-Control: max-age=10800
Conexiq-CDN-Cache: HIT
Content-Encoding: gzip
GET www.manbetx.uk/img/btn2.e32f2306.png
172.67.189.141200 OK 73 kB URL GET www.manbetx.uk/img/btn2.e32f2306.png
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type PNG image data, 798 x 260, 8-bit/color RGBA, non-interlaced
Hash e32f23063dd6ea3ab3229f5c0ff6a400
87221c4996702c2d69196953e3fadda3ad039fc8
0e83b960963daefd7b6062513239a47da56209f6640dc8301e758d88f3afc666
GET /img/btn2.e32f2306.png HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/css/chunk-815e9064.38a5a07a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:26 GMT
content-type: image/png
content-length: 72568
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vBCZg7VJ2RsuSU0SxihbVpEN8s8n6f4hMuznGwuqlDr6dBlKg%2BlNxG6yvw2u62tQpgSO6PcRXZAr8kwGYL4wClFU%2FlatJahdWtMCxjALQQW4YRtumVYpwhcRoiWZOAIcDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
etag: "6839b7db-11b78"
expires: Sun, 29 Jun 2025 16:57:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
cf-cache-status: EXPIRED
cf-ray: 947fc53e89fdb518-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3678&min_rtt=1064&rtt_var=3619&sent=132&recv=99&lost=0&retrans=0&sent_bytes=70996&recv_bytes=7788&delivery_rate=13783193&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=e5882be3f0f91900&ts=2735&x=80"
GET static-content-t.wb27jlt6u066.com:9587/style/css.css?20250516
103.197.58.87200 OK 129 kB URL GET static-content-t.wb27jlt6u066.com:9587/style/css.css?20250516
IP 103.197.58.87:9587
ASN #45352 IP ServerOne Solutions Sdn Bhd
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerSectigo Limited
Subjectstatic-content-t.wb27jlt6u066.com
Fingerprint41:82:90:79:FD:51:A3:CE:26:6D:17:F0:4E:57:1E:A6:E1:97:3A:20
ValidityFri, 18 Oct 2024 00:00:00 GMT - Sat, 18 Oct 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (525)
Size 129 kB (129036 bytes)
Hash b151dd1ae129aba3f1bd92cf8855c79f
cfde722a277405ab10eb93e22e7f41e4a5d00e0a
a007bf97b851052dffced07061ddcd28f1d7129df127f74dfd48ce95b7f470c3
GET /style/css.css?20250516 HTTP/1.1
Host: static-content-t.wb27jlt6u066.com:9587
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 May 2025 16:57:20 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 28 May 2025 03:05:38 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"68367d82-1f80c"
Expires: Fri, 30 May 2025 19:57:20 GMT
Cache-Control: max-age=10800
Conexiq-CDN-Cache: HIT
Content-Encoding: gzip
GET www.manbetx.uk/js/app.402090c3.js
172.67.189.141200 OK 4.6 kB URL GET www.manbetx.uk/js/app.402090c3.js
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type JavaScript source, ASCII text, with very long lines (4620), with no line terminators
Hash 52632543353d03fee00a313ad7a44785
38739a98150af3c8b44d3afb27cbadb08177c501
e5b543cbb62427f61002f3c9db8c97c374a1f8a7f251a8dd0a100c9678e250b1
GET /js/app.402090c3.js HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 30 May 2025 16:57:24 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 30 May 2025 13:51:23 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"6839b7db-120c"
expires: Fri, 06 Jun 2025 16:57:24 GMT
cache-control: max-age=604800
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HlxSUhDDHWQVnG5u9hcNDU5MrUIHR2X0JR%2BGLxIVgVY0vamefOceExj5bvcWREVeruZxAJoRv0q%2BtMbqvdAYyyvb7aVLcM%2FS8ZflWw%3D%3D"}]}
cf-ray: 947fc5332c38b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.manbetx.uk/css/chunk-815e9064.38a5a07a.css
172.67.189.141200 OK 1.6 kB URL GET www.manbetx.uk/css/chunk-815e9064.38a5a07a.css
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type ASCII text, with very long lines (1595), with no line terminators
Hash faf28abc9179ca342c4a3290e9be141f
3b05f7a7b6527b3631d169b5782f9828f3efea97
4aaf12738fdf6be6f6f55e1a53bf80b1d3491b8d0423381e490b3459d0bbd276
GET /css/chunk-815e9064.38a5a07a.css HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0b6llAVtYNRNxJimS7rr964m3jWPe1lNVmOAcZ9VSqHSpDNsljYIGW2ymJnBiMkRan3mPPmCbI%2BLuzX2idWL9kQPMcFPz4z1m3ScgyrlpVHvKKtFe2TvPZa0N1x8PwKDuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
vary: Accept-Encoding
etag: W/"6839b7db-63b"
expires: Fri, 06 Jun 2025 16:57:25 GMT
cache-control: max-age=604800
content-encoding: gzip
cf-cache-status: EXPIRED
cf-ray: 947fc53ab9e5b518-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5284&min_rtt=1064&rtt_var=4954&sent=117&recv=90&lost=0&retrans=0&sent_bytes=64029&recv_bytes=6095&delivery_rate=13783193&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=e5882be3f0f91900&ts=2131&x=80"
GET hm.baidu.com/hm.gif?hca=5668B28331685D1B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1030295235&si=2f60ef41d26337acc7101bc632659fac&su=https%3A%2F%2Fcn.hcumx.com%2F&v=1.3.2&lv=1&sn=19376&r=0&ww=1280&u=https%3A%2F%2Fwww.manbetx.uk%2F%23%2F&tt=MX%E8%90%BD%E5%9C%B0%E9%A1%B5
183.240.98.228200 OK 43 B URL GET hm.baidu.com/hm.gif?hca=5668B28331685D1B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1030295235&si=2f60ef41d26337acc7101bc632659fac&su=https%3A%2F%2Fcn.hcumx.com%2F&v=1.3.2&lv=1&sn=19376&r=0&ww=1280&u=https%3A%2F%2Fwww.manbetx.uk%2F%23%2F&tt=MX%E8%90%BD%E5%9C%B0%E9%A1%B5
IP 183.240.98.228:443
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?hca=5668B28331685D1B&cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1030295235&si=2f60ef41d26337acc7101bc632659fac&su=https%3A%2F%2Fcn.hcumx.com%2F&v=1.3.2&lv=1&sn=19376&r=0&ww=1280&u=https%3A%2F%2Fwww.manbetx.uk%2F%23%2F&tt=MX%E8%90%BD%E5%9C%B0%E9%A1%B5 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 30 May 2025 16:57:26 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=6030A5C16374A4BB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
104.21.2.13302 Found 99 kB IP 104.21.2.13:443
Certificate IssuerGoogle Trust Services
Subjectiman23.com
FingerprintB6:57:3C:81:AA:5B:A8:C7:E7:14:64:FC:85:6D:78:FE:73:36:5E:2F
ValidityMon, 14 Apr 2025 20:05:04 GMT - Sun, 13 Jul 2025 21:03:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing ManBetX
GET / HTTP/1.1
Host: iman23.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 30 May 2025 16:57:16 GMT
location: https://cn.hcumx.com/home/register?code=40513
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FplwpKDOJuW9MqQbHXn%2Bct1whc%2BBDPn6L8hbISc46hJHCDUhjj0YO%2FhA%2BXF0%2BWxa4BzJHnfj3LXd7Q0Untg1zU2enh1nNstO"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 947fc50449450b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET static-content-cn.wb27jlt6u066.com:9587/util/messenger.css
103.197.58.87200 OK 9.2 kB URL GET static-content-cn.wb27jlt6u066.com:9587/util/messenger.css
IP 103.197.58.87:9587
ASN #45352 IP ServerOne Solutions Sdn Bhd
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerSectigo Limited
Subjectstatic-content-cn.wb27jlt6u066.com
Fingerprint00:89:62:01:8C:5E:2B:CC:B2:4B:4B:07:7A:17:E7:1F:09:CA:1A:05
ValidityFri, 18 Oct 2024 00:00:00 GMT - Sat, 18 Oct 2025 23:59:59 GMT
File type ASCII text, with very long lines (538)
Hash 26f774e67203df0b4387b8fdee38643c
d46d750b7882c8c3aff3690472c6ad6c5c32d546
3d3b344953f5a8668a3a045c902c84e530407997885301cfffd4a1724b6b37f8
GET /util/messenger.css HTTP/1.1
Host: static-content-cn.wb27jlt6u066.com:9587
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 May 2025 16:57:20 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 20 Jul 2022 18:47:53 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62d84dd9-2410"
Expires: Fri, 30 May 2025 19:57:20 GMT
Cache-Control: max-age=10800
Conexiq-CDN-Cache: HIT
Content-Encoding: gzip
GET static-content-cn.wb27jlt6u066.com:9587/js/jquery/jquery.carousel.js
103.197.58.87200 OK 24 kB URL GET static-content-cn.wb27jlt6u066.com:9587/js/jquery/jquery.carousel.js
IP 103.197.58.87:9587
ASN #45352 IP ServerOne Solutions Sdn Bhd
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerSectigo Limited
Subjectstatic-content-cn.wb27jlt6u066.com
Fingerprint00:89:62:01:8C:5E:2B:CC:B2:4B:4B:07:7A:17:E7:1F:09:CA:1A:05
ValidityFri, 18 Oct 2024 00:00:00 GMT - Sat, 18 Oct 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 1552106a3e80457c7c75722b7372d303
32ba62ff7b3590d3325d159141aa50a1db5802aa
52947c9e6ac3e2f45c2b2a19802a91eeb75dc70902bf4bd87419a6386300848c
GET /js/jquery/jquery.carousel.js HTTP/1.1
Host: static-content-cn.wb27jlt6u066.com:9587
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 May 2025 16:57:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 20 Jul 2022 18:47:52 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62d84dd8-5e3a"
Expires: Fri, 30 May 2025 19:57:20 GMT
Cache-Control: max-age=10800
Conexiq-CDN-Cache: HIT
Content-Encoding: gzip
GET www.manbetx.uk/css/chunk-815e9064.38a5a07a.css
172.67.189.141200 OK 1.6 kB URL GET www.manbetx.uk/css/chunk-815e9064.38a5a07a.css
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type ASCII text, with very long lines (1595), with no line terminators
Hash faf28abc9179ca342c4a3290e9be141f
3b05f7a7b6527b3631d169b5782f9828f3efea97
4aaf12738fdf6be6f6f55e1a53bf80b1d3491b8d0423381e490b3459d0bbd276
GET /css/chunk-815e9064.38a5a07a.css HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Cookie: Hm_lvt_2f60ef41d26337acc7101bc632659fac=1748624246; Hm_lpvt_2f60ef41d26337acc7101bc632659fac=1748624246; HMACCOUNT=5668B28331685D1B
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:27 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C7I0MBDBwCnpYv9mPWssjyySaX1emdyw%2B2Ba%2Fl2ueIFmlyYradqL7Mx4wCzW2wVVmzdpOj%2BoKmgob3h9GmIyag%2BlTmbuyRsqcytEyIXPQAyMGsLFemDfsyX5jd773anD5w%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
vary: Accept-Encoding
etag: W/"6839b7db-63b"
expires: Fri, 06 Jun 2025 16:57:25 GMT
cache-control: max-age=604800
content-encoding: gzip
age: 2
cf-cache-status: HIT
cf-ray: 947fc54ccb50b518-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4923&min_rtt=1064&rtt_var=3879&sent=1768&recv=119&lost=55&retrans=56&sent_bytes=2019451&recv_bytes=9498&delivery_rate=41443225&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=336840&unsent_bytes=0&cid=e5882be3f0f91900&ts=4478&x=80"
GET static-content-t.wb27jlt6u066.com:9587/style/main.css?20241210
103.197.58.87200 OK 60 kB URL GET static-content-t.wb27jlt6u066.com:9587/style/main.css?20241210
IP 103.197.58.87:9587
ASN #45352 IP ServerOne Solutions Sdn Bhd
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerSectigo Limited
Subjectstatic-content-t.wb27jlt6u066.com
Fingerprint41:82:90:79:FD:51:A3:CE:26:6D:17:F0:4E:57:1E:A6:E1:97:3A:20
ValidityFri, 18 Oct 2024 00:00:00 GMT - Sat, 18 Oct 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (449)
Hash 47b8ab1d9097c87c52fb53d3e1b76a94
1f8a02ea284f2cec59f53c2a06a6ef344c212a45
18b74712e855ebac268e544dffd223adb6d65ba513a664574da352e041128b07
GET /style/main.css?20241210 HTTP/1.1
Host: static-content-t.wb27jlt6u066.com:9587
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 May 2025 16:57:20 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 10 Dec 2024 05:04:09 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"6757cbc9-e898"
Expires: Fri, 30 May 2025 19:57:20 GMT
Cache-Control: max-age=10800
Conexiq-CDN-Cache: HIT
Content-Encoding: gzip
172.67.189.141200 OK 1.2 kB IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (785)
Hash 52e1a54b00a01bfd71221deeb5680d0e
c10c45f079560e5fde1662826ab913d658105fb6
0a419beb00fdc9c0e8f9aaae4c1205334933bcbe400540a661d020ea44fdedc8
GET / HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 30 May 2025 16:57:23 GMT
content-type: text/html
server: cloudflare
last-modified: Fri, 30 May 2025 13:51:23 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RdbekWChhUbdEeX2P9bzfFD1FornhT7P9p1PKYYufzAEa31EwYXKHi9nloUDX%2F0rbVdgAq%2Brq517KuEggoZFRiQKUKYmSRMvDw%2BUjw%3D%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 947fc52d19fab4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-119765380-3
142.250.74.168200 OK 279 kB URL GET www.googletagmanager.com/gtag/js?id=UA-119765380-3
IP 142.250.74.168:443
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint10:76:57:2F:C3:21:F2:5F:71:E4:85:A5:DB:F7:65:3F:51:03:55:07
ValidityMon, 12 May 2025 08:42:57 GMT - Mon, 04 Aug 2025 08:42:56 GMT
File type JavaScript source, ASCII text, with very long lines (5432)
Size 279 kB (279209 bytes)
Hash eec0d2b0d4223ee602e7e3d63da09ae7
a67ef897e9fcf587fe4684af0d345dd7ab4598ee
d79eb6350a03d078979d5e80a5843e8cbdc02fb09c4b5c330ca466fd8e3af3fd
GET /gtag/js?id=UA-119765380-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 30 May 2025 16:57:19 GMT
expires: Fri, 30 May 2025 16:57:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 98639
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.manbetx.uk/img/btn3.cbcc2fab.png
172.67.189.141200 OK 75 kB URL GET www.manbetx.uk/img/btn3.cbcc2fab.png
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type PNG image data, 798 x 260, 8-bit/color RGBA, non-interlaced
Hash cbcc2fabcf9140df4ba586f141c4c77a
0a2ed418a5613331de837aefdcb3102143d6dcea
d88b18c365398f662a97260aefe0d5f508382c9c48b3c1400a38a46e076710fd
GET /img/btn3.cbcc2fab.png HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/css/chunk-815e9064.38a5a07a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:26 GMT
content-type: image/png
content-length: 75007
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DGWWhIuJcXiP0%2BKFyksN3p%2BHoRmtZem6Mz3Gx3aHQkbU%2BVyugXTDFoMOeGVPtc%2F35R7GkGSXwQijlhLtLlvyaksE3Ljno3vbv1VJsGmYv%2FTmhaV%2FGC97iY0vKh7VinvaFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
etag: "6839b7db-124ff"
expires: Sun, 29 Jun 2025 16:57:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
cf-cache-status: EXPIRED
cf-ray: 947fc53e89feb518-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3405&min_rtt=1064&rtt_var=3260&sent=133&recv=100&lost=0&retrans=0&sent_bytes=71679&recv_bytes=7833&delivery_rate=13783193&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=e5882be3f0f91900&ts=2755&x=80"
GET www.manbetx.uk/favicon.ico
172.67.189.141200 OK 1.2 kB URL GET www.manbetx.uk/favicon.ico
IP 172.67.189.141:443
Certificate IssuerGoogle Trust Services
Subjectmanbetx.uk
FingerprintEC:8D:84:67:35:73:96:F7:99:7A:C1:EE:9B:9E:2B:F8:E8:95:3A:62
ValidityTue, 29 Apr 2025 08:42:56 GMT - Mon, 28 Jul 2025 09:40:39 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash a970762d135e06a1d0a982e92627eea2
c75f6962b7e717dea8761c63a6fc7bbd47f8bd0a
93b5d76d0e220077f0df098dab49acd243597dc5574a22fe0a4bf0d9568202ba
GET /favicon.ico HTTP/1.1
Host: www.manbetx.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 30 May 2025 16:57:25 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cEuEKZzw8Bte3HRQbewEoLRX5a09jjopMNDbR0c4gnp3ZK%2FtYY8Wz0744cc%2Bdez6HtEnDYyCZ5rh4GXvZK1HW%2B51TKOpMi%2BUH0W0jP862EEG6gl0zsyHXE%2FekZ441yc5Tw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 30 May 2025 13:51:23 GMT
vary: Accept-Encoding
etag: W/"6839b7db-47e"
expires: Sun, 29 Jun 2025 16:57:25 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: EXPIRED
cf-ray: 947fc53ca9eeb518-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4343&min_rtt=1064&rtt_var=4407&sent=127&recv=97&lost=0&retrans=0&sent_bytes=67581&recv_bytes=7700&delivery_rate=13783193&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=48000&unsent_bytes=0&cid=e5882be3f0f91900&ts=2431&x=80"
GET cn.hcumx.com/home/register?code=40513
172.65.201.65200 OK 99 kB URL User Request GET cn.hcumx.com/home/register?code=40513
IP 172.65.201.65:443
Certificate IssuerSectigo Limited
Subjectcn.hcumx.com
Fingerprint2A:FC:31:A2:66:2F:BA:61:4D:81:69:1C:44:EE:4C:A6:E3:9E:33:46
ValidityFri, 24 Jan 2025 00:00:00 GMT - Sat, 24 Jan 2026 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (396)
Hash 3467482f5c8bad3c0120e9505982db54
5ece8f6e731eec02bfa49aec03338092089361fe
193c09e4de1d719756f951224c03b60a568ab61555c552e342aca997f4890e95
GET /home/register?code=40513 HTTP/1.1
Host: cn.hcumx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 May 2025 16:57:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
Set-Cookie: ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=hcumx.com
vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=hcumx.com
PHPSESSID=crr4a8p1sa5k546ceqrv1ingo2; path=/
_code_cookie=40513-; path=/; domain=hcumx.com
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Server: gocache
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
c-Type: df
rid: 2c3a2a79b74a725fc005d81523f897db
Strict-Transport-Security: max-age=31536000; includeSubDomains
GET www.f4bzyrz92us3.com/E2/EagleEye.js?1748624238
172.65.201.65200 OK 55 kB URL GET www.f4bzyrz92us3.com/E2/EagleEye.js?1748624238
IP 172.65.201.65:443
Requested by https://cn.hcumx.com/home/register?code=40513
Certificate IssuerSectigo Limited
Subjectwww.f4bzyrz92us3.com
Fingerprint74:11:6D:53:CA:6F:CA:A5:4D:73:C4:BF:A6:61:7D:6B:CF:DE:06:4C
ValidityTue, 10 Sep 2024 00:00:00 GMT - Wed, 10 Sep 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (37140), with CRLF line terminators
Hash 139b9b19e266e0b55f7a39a0941e9bea
048a1becc4f36214b75757c28f0b4fb75d2a54db
4a6ccff0b00e5b1cba90d6719fa5221d906b04da41cab11221bf3ccea0281293
GET /E2/EagleEye.js?1748624238 HTTP/1.1
Host: www.f4bzyrz92us3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn.hcumx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 May 2025 16:57:20 GMT
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 15592
Connection: keep-alive
Cache-Control: max-age=86400
Content-Encoding: deflate
X-AspNetMvc-Version: 5.1
X-AspNet-Version: 4.0.30319
Set-Cookie: E2token=81f45564-badc-4fd3-9eba-92ecd5e4fb04; expires=Wed, 30-May-2035 16:57:20 GMT; path= ; samesite = None; secure; HttpOnly
X-Powered-By: ASP.NET
Server: gocache
Expires: Sat, 31 May 2025 16:57:20 GMT
c-Type: st
rid: 989463fb8095a8b47f8a4a26eb0f8ed0
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Cache-Status: MISS
GET hm.baidu.com/hm.js?2f60ef41d26337acc7101bc632659fac
183.240.98.228200 OK 30 kB URL GET hm.baidu.com/hm.js?2f60ef41d26337acc7101bc632659fac
IP 183.240.98.228:443
ASN #56040 China Mobile communications corporation
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
FingerprintEF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0
ValidityMon, 08 Jul 2024 01:41:02 GMT - Sat, 09 Aug 2025 01:41:01 GMT
File type JavaScript source, ASCII text, with very long lines (632)
Hash 89590e83139b7d609c50baf7dca96b9b
8a9269aff5ac3216a0d359a539ac01f9adf6e1c5
e485bdb9c4bf724a5eb7637bbba6ee9ec305b6ae4c730237dcd0e93e45490e7b
GET /hm.js?2f60ef41d26337acc7101bc632659fac HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.manbetx.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11302
Content-Type: application/javascript
Date: Fri, 30 May 2025 16:57:25 GMT
Etag: 4f1ba6cdf3be072b10f5468c6fc71388
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=5668B28331685D1B; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800