{"report_id":"30373e61-9ac6-4ac5-a34d-48fae75e8869","version":0,"status":"done","tags":[],"date":"2026-06-28T12:40:37Z","url":{"schema":"http","addr":"6299betoi.com","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"6299betoi.com/","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"title":"6299bet - Plataforma Oficial -6299bet.com","dom":{"size":34810,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9c8e2835dc0c6d405e684e5375b70084","sha1":"90cc31a29f60ddb50fa24f232770b7591ab0668c","sha256":"d2a57e8ce78d6001be5c69290031295a1214514b4811b391442e363f1df3c34d","sha512":"8692dd20e979b4af32bdc2ddd9644cf2a844be91e115ee118a24fc8c9dcbebc3b63556aa611d954ae735fa8ebf8636c8d8c4303a36694302aa7988b20c01b520","ssdeep":"384:zGAveH62bMndeebzkrkaJmetl9NPKunziVqg:aAveAdzzcVtl9NPK4OVqg","tlshash":"e3f27312c4f0180a5192a0a1ada2e76b3f508947f54e8be532ed49a97fcedf5cc3724d","dom_hash":"domhash2d5d07ce5dc66df2d7c77adfc91a81c6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"6299betoi.com","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T12:40:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"6299betoi.com","ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-03","domain_rank":0,"first_seen":"2026-06-28T12:40:37.282034Z","last_seen":"2026-06-28T12:40:37.282034Z","alert_count":27,"request_count":9,"received_data":496414,"sent_data":4516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"node93.aizhantj.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":2930956,"first_seen":"2025-06-07T21:55:48.499212Z","last_seen":"2026-06-25T02:06:24.503489Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":473,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"6299betoi.com/","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53443555b8154e95d109c9a65c359f89","sha1":"9b6d6b2b93bcd532fbde94a7d113dc2caf905ca3","sha256":"a7c9c8fa92e58b824c23de44184e5acdd67761b2497cb938a231943131ec78e6","sha512":"e052d37a1134b15a408190def6d03928c26fb71470438c0a2b1ae1ad1b68bbaea0c21af60b99252189768af95d545df38a762344ce42b990df03a328f6820398","ssdeep":"","tlshash":"fac080399e7554705157f420775fb60529750d431004c84f751c478d4fd6e58187247d","size":187,"data":"","first_seen":"2026-06-28T12:40:40.875386Z","last_seen":"2026-06-28T16:14:39.563053Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528b9f55948409fff157cdcc225b28a3","sha1":"aa40797c47c2f8ff660c93b352ef15ca1b297f6a","sha256":"fdd1993b015ca9785b7c1d3f26c8170c73ef16a561f8e7dad62561381449d7a6","sha512":"f5890f886e6bd307d2ad91c290b16f89c5d114e13c96fbfccea73dad276702241bcfd51d74ee2f2e5bc0b15ab292ec0f714a33e81a26cd709bfd2304e97824cb","ssdeep":"","tlshash":"efd0a7ab364419b6d78a00b80d7ed69eb561513668afc41188cdc5ea8a20dd8489dacd","size":241,"data":"","first_seen":"2026-06-07T14:30:24.131566Z","last_seen":"2026-07-18T06:14:33.469261Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/static/zgila1qo/script.js","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7196eb04abc479aa37583cff42a60a22","sha1":"8f5a55457c84db38fe73acc539a107739fd1acbf","sha256":"4b5570ff12e6f0b0c60c1dfb55d7f3b121249071f3806d671f670299ac8f8ee2","sha512":"12c47513c60dd1e9e9aded39e4f6bdf3338ae997fb544480b9e5d3fa70ff9a87f22bef463d06b836a08da7b78c7347a0f8ec1ed7f232ade72b7552ac69501e68","ssdeep":"","tlshash":"49316b7be0100d3780372b75b39285a7f928105fa94140637e5cdf052fb28b65462dbe","size":1743,"data":"","first_seen":"2025-10-12T07:39:16.343497Z","last_seen":"2026-07-15T07:19:38.247215Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🎰 6299bet - Platform loaded successfully!","filename":"https://6299betoi.com/","line_number":467,"column_number":21},{"level":"log","text":"🍔 移动端汉堡菜单已加载","filename":"https://6299betoi.com/static/zgila1qo/script.js","line_number":45,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"6299betoi.com/static/zgila1qo/logo.png","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6299betoi.com/","date":"2026-06-28T12:40:05.303Z","timestamp":1782650405303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6299betoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 04:04:34 GMT","end":"Wed, 26 Aug 2026 05:02:39 GMT"},"fingerprint":{"sha1":"39:78:67:5C:E9:6D:4B:87:B9:D6:29:88:4B:F4:3F:2A:D9:71:F5:FE","sha256":"89:CD:37:68:96:93:6F:83:43:F5:26:AE:5E:E9:0D:F0:CF:1C:69:74:58:B6:48:E4:2E:98:2D:9D:93:60:2D:32"}}},"request":{"raw":"GET /static/zgila1qo/logo.png HTTP/1.1\r\nHost: 6299betoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://6299betoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:40:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 12:40:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0efd35-3cb95\"\r\nexpires: Tue, 28 Jul 2026 12:40:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzgs7E%2BieQ5hKiza84M3uePlEVhzWxRPudlIhZw28q%2BIpggHXmYjkfPQ1Gphw4RDlsIya2kTvkWbM2jXodWlANcqFse%2FX2Cf9%2Bea1WW1KJkZWe5R4MlQE3EWY9QLfg%2FR\"}]}\r\ncf-ray: a12cc2092b707130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248725,"size_decoded":249084,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"85413e67512209872f375a0518f49abb","sha1":"31954595bd6ccca784031c4173b9564a34688f72","sha256":"c48b2bfff06f2ee1c768b6c313daeab0b41075bde5306eb0bed6f0f90dc7e33a","sha512":"c4dd9e68176fc1436ae3d2144742f8c2e0b04240de9c57445fab0aea463b60b7a61165cc34912c7128d38ebb2009a2cfc8f0b5205061cd510ebe8beac9dee64e","ssdeep":"6144:PhU5lLYZGMEy1p07JElCBPtA1tPhSSc2mN8M4oxq/rbVk:PhU5lLYs80nBlkPBq8MHirbVk","tlshash":"06342243edcdc8ecbaf91a9896e0094c52f406176310b61cedc65242f7af8b4f5d8ea5","first_seen":"2026-06-28T12:40:40.865784Z","last_seen":"2026-06-28T16:14:39.531528Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":714,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node93.aizhantj.com:21233/tjjs/?k=qtn7fufe2uo","fqdn":"node93.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6299betoi.com/","date":"2026-06-28T12:40:05.974Z","timestamp":1782650405974,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tjjs/?k=qtn7fufe2uo HTTP/1.1\r\nHost: node93.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://6299betoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T08:43:08.114451Z","times_seen":17333644,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/static/zgila1qo/favicon.ico","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6299betoi.com/","date":"2026-06-28T12:40:06.498Z","timestamp":1782650406498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6299betoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 04:04:34 GMT","end":"Wed, 26 Aug 2026 05:02:39 GMT"},"fingerprint":{"sha1":"39:78:67:5C:E9:6D:4B:87:B9:D6:29:88:4B:F4:3F:2A:D9:71:F5:FE","sha256":"89:CD:37:68:96:93:6F:83:43:F5:26:AE:5E:E9:0D:F0:CF:1C:69:74:58:B6:48:E4:2E:98:2D:9D:93:60:2D:32"}}},"request":{"raw":"GET /static/zgila1qo/favicon.ico HTTP/1.1\r\nHost: 6299betoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://6299betoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:40:06 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a0efd35-c1b\"\r\nlast-modified: Thu, 21 May 2026 12:40:21 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5HiTOhRQi2ft02%2BGLGGEAme7xBTEazV%2BSRVlZDGYBavLu42t9QhpJXGzclr7Zv5zSc8Y9Vh9OphTQFlP3MieQHYL6aFKctlv0Cd6jUp21%2B6yTMbi9uYcYgqnczE86CX\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12cc2109b957130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3099,"size_decoded":3777,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"49b3c55d5eed85f5253f5cd4954e9374","sha1":"a350b1f061471638b2970b784914551909b1bb51","sha256":"a894754e7c5429ee65c122c0b1d8c519065e78e0a6cbbd1911e9e22bc68c0cb9","sha512":"f79e1e3e228e5490e0df997b8d45b8e5dee3a8dacf5c4e1af38c00631959c373a9f3d0eb2c9c76ceda5fc7a24a20a7bcac4635dd2cc51219a7dcb2659bc18389","ssdeep":"","tlshash":"16517d44e4dac38847546cb86140f31222e38adf1296e579f7ddc6c12906b76950e352","first_seen":"2026-06-28T12:40:40.867942Z","last_seen":"2026-06-28T16:14:39.527959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/static/zgila1qo/favicon.ico","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6299betoi.com/","date":"2026-06-28T12:40:06.500Z","timestamp":1782650406500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6299betoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 04:04:34 GMT","end":"Wed, 26 Aug 2026 05:02:39 GMT"},"fingerprint":{"sha1":"39:78:67:5C:E9:6D:4B:87:B9:D6:29:88:4B:F4:3F:2A:D9:71:F5:FE","sha256":"89:CD:37:68:96:93:6F:83:43:F5:26:AE:5E:E9:0D:F0:CF:1C:69:74:58:B6:48:E4:2E:98:2D:9D:93:60:2D:32"}}},"request":{"raw":"GET /static/zgila1qo/favicon.ico HTTP/1.1\r\nHost: 6299betoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://6299betoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:40:06 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a0efd35-c1b\"\r\nlast-modified: Thu, 21 May 2026 12:40:21 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRFKUdqEHrrYojaRCBVZQ0oQR06nStB0hvQGR0%2FLlfvCrNTGMz9gznf%2Bk8yILOQOFeTY%2FNnvoXPfuNblgI%2B09HSiVbBuEOvwjagw160SZIBSG1zvEpJA88%2B0YTfdQJAd\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12cc210ab967130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3099,"size_decoded":3788,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"49b3c55d5eed85f5253f5cd4954e9374","sha1":"a350b1f061471638b2970b784914551909b1bb51","sha256":"a894754e7c5429ee65c122c0b1d8c519065e78e0a6cbbd1911e9e22bc68c0cb9","sha512":"f79e1e3e228e5490e0df997b8d45b8e5dee3a8dacf5c4e1af38c00631959c373a9f3d0eb2c9c76ceda5fc7a24a20a7bcac4635dd2cc51219a7dcb2659bc18389","ssdeep":"","tlshash":"16517d44e4dac38847546cb86140f31222e38adf1296e579f7ddc6c12906b76950e352","first_seen":"2026-06-28T12:40:40.867942Z","last_seen":"2026-06-28T16:14:39.527959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T12:40:04.674Z","timestamp":1782650404674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6299betoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 04:04:34 GMT","end":"Wed, 26 Aug 2026 05:02:39 GMT"},"fingerprint":{"sha1":"39:78:67:5C:E9:6D:4B:87:B9:D6:29:88:4B:F4:3F:2A:D9:71:F5:FE","sha256":"89:CD:37:68:96:93:6F:83:43:F5:26:AE:5E:E9:0D:F0:CF:1C:69:74:58:B6:48:E4:2E:98:2D:9D:93:60:2D:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6299betoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:40:05 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 21 May 2026 12:40:41 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3B3AVleS%2F3G7FH4cxU%2Fs2ZSzf187jMMetLn148MvDHEQ45OaUN7ssyeaPAjkepIQ5oViz8aa%2B%2BpB%2B1A%2BqXFq6rnBX0kTQVBr0waeHj7oN5%2BPgzwbA6m%2BMP7Ov7VAcbl\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a12cc2056b407130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34763,"size_decoded":8335,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"23a8bdbcbf52c668ef827b6775c79c36","sha1":"df1399d6e2b3516f655943540f42354c46df2e10","sha256":"ae02592a78203a0a134eab92ca6112f3511f83b5ad0c6a37c3959157a97e0296","sha512":"bbb72b7f4706eb016134a26aae98172a192331c9271da559dbc9c248249b7e6c5369d68232174f943696e048ec7c77443127000c6ed219f7c56d286f10c4ca28","ssdeep":"384:iGAveH62bMndeebzkrkaJm8l9NPKunziVqg:xAveAdzzc/l9NPK4OVqg","tlshash":"9af28312c4f0280a519290a1ada2e76b3f508947f54e8be532ed49a97fcedf5cc3724d","first_seen":"2026-06-28T12:40:40.869518Z","last_seen":"2026-06-28T16:14:39.530149Z","times_seen":4,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":0,"dns":12,"connect":19,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/static/zgila1qo/main.css","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6299betoi.com/","date":"2026-06-28T12:40:05.292Z","timestamp":1782650405292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6299betoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 04:04:34 GMT","end":"Wed, 26 Aug 2026 05:02:39 GMT"},"fingerprint":{"sha1":"39:78:67:5C:E9:6D:4B:87:B9:D6:29:88:4B:F4:3F:2A:D9:71:F5:FE","sha256":"89:CD:37:68:96:93:6F:83:43:F5:26:AE:5E:E9:0D:F0:CF:1C:69:74:58:B6:48:E4:2E:98:2D:9D:93:60:2D:32"}}},"request":{"raw":"GET /static/zgila1qo/main.css HTTP/1.1\r\nHost: 6299betoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://6299betoi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 12:40:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a0efd34-1cd0\"\r\nexpires: Mon, 29 Jun 2026 00:40:05 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7adi6%2B2LOVOqllkK5PJ0UsH2RooKSnPuw2JfkiRQnIQAq4lWiXBmpCGmqECp%2Bf5%2BaKlC8fH8d6c858tI49KWHFfq3bLcjLAQw797g2wmi3WhFDMT5U5gK1xutGn1OD8\"}]}\r\ncf-ray: a12cc2091b6e7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7376,"size_decoded":2698,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5679e261d1737c8eedf01677e3426b25","sha1":"b1f243fde293356c282bb0036a7d75e578f00a18","sha256":"244a3aa948b920a9d866c10c6a3bbac6573acfd455f4bd6ca7d6dddb23f0728c","sha512":"6d56258eedda85976934eea3f043d9fa049a251eefe16e845f141cf8136b4c3f824fb779be3fe0aa08b87e9d478d2054995ae023e06857af715e8aa6e260f2a3","ssdeep":"192:qRJ5x9T+kf80uRB5E8di9CwbBdpOWZq3u32FKz6jJ:qDMCrS4K","tlshash":"fee1f24dda461183a237efb49bb34794e6d450638a0a42bd7bec62408ff9078d535f8c","first_seen":"2025-10-12T07:39:16.325407Z","last_seen":"2026-07-11T23:43:41.343593Z","times_seen":73,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/static/zgila1qo/script.js","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6299betoi.com/","date":"2026-06-28T12:40:05.295Z","timestamp":1782650405295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6299betoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 04:04:34 GMT","end":"Wed, 26 Aug 2026 05:02:39 GMT"},"fingerprint":{"sha1":"39:78:67:5C:E9:6D:4B:87:B9:D6:29:88:4B:F4:3F:2A:D9:71:F5:FE","sha256":"89:CD:37:68:96:93:6F:83:43:F5:26:AE:5E:E9:0D:F0:CF:1C:69:74:58:B6:48:E4:2E:98:2D:9D:93:60:2D:32"}}},"request":{"raw":"GET /static/zgila1qo/script.js HTTP/1.1\r\nHost: 6299betoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://6299betoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:40:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 12:40:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a0efd34-6d2\"\r\nexpires: Mon, 29 Jun 2026 00:40:05 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9mPA6fMg1O5xYNm2IVZWbpD6FjgXqwWE5VPpvGPnfzAyhQK5PqYytaGCVAgnGFEU0azmOx3gawqyKrgg%2B74%2BgWRlg0xzDPjFiIKmFYm4k61ob5%2F9FvEEAC%2BLi5IfwZI\"}]}\r\ncf-ray: a12cc2091b6f7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1746,"size_decoded":1406,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"7196eb04abc479aa37583cff42a60a22","sha1":"8f5a55457c84db38fe73acc539a107739fd1acbf","sha256":"4b5570ff12e6f0b0c60c1dfb55d7f3b121249071f3806d671f670299ac8f8ee2","sha512":"12c47513c60dd1e9e9aded39e4f6bdf3338ae997fb544480b9e5d3fa70ff9a87f22bef463d06b836a08da7b78c7347a0f8ec1ed7f232ade72b7552ac69501e68","ssdeep":"","tlshash":"49316b7be0100d3780372b75b39285a7f928105fa94140637e5cdf052fb28b65462dbe","first_seen":"2025-10-12T07:39:16.343497Z","last_seen":"2026-07-15T07:19:38.247215Z","times_seen":91,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/static/zgila1qo/big_2zerko8f0.jpg","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6299betoi.com/","date":"2026-06-28T12:40:05.304Z","timestamp":1782650405304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6299betoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 04:04:34 GMT","end":"Wed, 26 Aug 2026 05:02:39 GMT"},"fingerprint":{"sha1":"39:78:67:5C:E9:6D:4B:87:B9:D6:29:88:4B:F4:3F:2A:D9:71:F5:FE","sha256":"89:CD:37:68:96:93:6F:83:43:F5:26:AE:5E:E9:0D:F0:CF:1C:69:74:58:B6:48:E4:2E:98:2D:9D:93:60:2D:32"}}},"request":{"raw":"GET /static/zgila1qo/big_2zerko8f0.jpg HTTP/1.1\r\nHost: 6299betoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://6299betoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:40:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 21 May 2026 12:40:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0efd49-772b\"\r\nexpires: Tue, 28 Jul 2026 12:40:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6JP9O5uN%2B4Uj1vx43h1bex45bHDGsr3zkNPNUqjtTTL4DYVWUaczpEx6zrKliGMLiBs0EUOWZbbPC7pOhnll4vm%2BZJDSNxGVFkIzNG3ghfEgFuIMt%2BNsyT50ZrqhiWR\"}]}\r\ncf-ray: a12cc2092b717130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30507,"size_decoded":30447,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 284x177, components 3","md5":"9544b8c589e4c077a87087aa16843311","sha1":"0e8746571b894e2f59e1ca6cd3bab8fca993d55e","sha256":"393592716f80bcc30a093fa3f57583556ea5bf7fe019306257152da44dded0bd","sha512":"3e1a7ef5c2870590879f2fb09c3c3f3d30c66af3105ee8571898515b1fe00c825cc341b86df19c59f2cdade10e55b8635a23f531f98635417f28ddaf49c9b82c","ssdeep":"768:UtfWHRbdyllfbgU4f+0zgVj+OpJZfPzbz8W1CEGvz:UtcJyllfkU4TgVjFZXIM5Gvz","tlshash":"5ad2e1b32f28c3dcb68ab37cc1f99f4915cdbf28b69c086c75e5684cac12586565630b","first_seen":"2026-06-28T12:40:40.872319Z","last_seen":"2026-06-28T16:14:39.53344Z","times_seen":4,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/static/zgila1qo/big_2vfk8igeth.jpg","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6299betoi.com/","date":"2026-06-28T12:40:05.306Z","timestamp":1782650405306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6299betoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 04:04:34 GMT","end":"Wed, 26 Aug 2026 05:02:39 GMT"},"fingerprint":{"sha1":"39:78:67:5C:E9:6D:4B:87:B9:D6:29:88:4B:F4:3F:2A:D9:71:F5:FE","sha256":"89:CD:37:68:96:93:6F:83:43:F5:26:AE:5E:E9:0D:F0:CF:1C:69:74:58:B6:48:E4:2E:98:2D:9D:93:60:2D:32"}}},"request":{"raw":"GET /static/zgila1qo/big_2vfk8igeth.jpg HTTP/1.1\r\nHost: 6299betoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://6299betoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:40:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 21 May 2026 12:40:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0efd49-22fa1\"\r\nexpires: Tue, 28 Jul 2026 12:40:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H24pZuiINAyyfokklKAVHNDDAKRcIiv%2BwMb2BcELNfuIY%2BKI%2BalOp9lWK%2B3MySVx3CFOEjHZpJeQJldMmfaHVYTRGNDnlrSImWxMblebNmp95W%2FGsW%2Fekj9oNiWrwtkY\"}]}\r\ncf-ray: a12cc2092b727130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143265,"size_decoded":143266,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 820x512, components 3","md5":"49a6d0db7efd609e54dcc0a30e285ef6","sha1":"de809dd8e81f4b5cf8f617fa863229dc3157ca38","sha256":"c33a7257bbc300301b414ea25f67bc3316147677a178316769b123af2cd01469","sha512":"8fd6557fb60760122f25b34a9c80c9ee350a257e753b621471f19605fba27e96e3746eb266732263a4789b946fa342827a998f94457f39c2a17c1a8f0b74beab","ssdeep":"3072:1n/GM7HO2qmhSywLtIEuaBqxWgULwJ4A2GLZzNSqBgDceEo3SVriS:QdJmhSyANuoKWgz4A2GlNSoeEo3KrZ","tlshash":"a5e312851568aa726965fe522c12049b30d60f283317f74e13e109a576cff3b0d3d2de","first_seen":"2026-06-28T12:40:40.873178Z","last_seen":"2026-06-28T16:14:39.559892Z","times_seen":4,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":526,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6299betoi.com/static/zgila1qo/big_yrt4uvx.jpg","fqdn":"6299betoi.com","domain":"6299betoi.com","tld":"com"},"ip":{"addr":"104.21.88.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6299betoi.com/","date":"2026-06-28T12:40:05.308Z","timestamp":1782650405308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6299betoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 04:04:34 GMT","end":"Wed, 26 Aug 2026 05:02:39 GMT"},"fingerprint":{"sha1":"39:78:67:5C:E9:6D:4B:87:B9:D6:29:88:4B:F4:3F:2A:D9:71:F5:FE","sha256":"89:CD:37:68:96:93:6F:83:43:F5:26:AE:5E:E9:0D:F0:CF:1C:69:74:58:B6:48:E4:2E:98:2D:9D:93:60:2D:32"}}},"request":{"raw":"GET /static/zgila1qo/big_yrt4uvx.jpg HTTP/1.1\r\nHost: 6299betoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://6299betoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:40:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 21 May 2026 12:40:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0efd49-441a\"\r\nexpires: Tue, 28 Jul 2026 12:40:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CrUSTPNLX6z7AEYeB%2BvvRNNXgdNWgipCJKlB8wnGiSJjQJYH6Bq0LEJA%2B5VD5gIFi1pz%2FobRufIqc117TYenu8A11HoKRsKoIKsqF3Mc7BVM6tRHHtotU5ckIwPJRjp\"}]}\r\ncf-ray: a12cc2092b737130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17434,"size_decoded":17492,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 307x164, components 3","md5":"92149548cc130945c18a7d492e259f8a","sha1":"4d2d2bd9a3ff5d55505661e9807cb0f60675fe89","sha256":"ffc63367263032074dd5218417f30a98779dc98a9612dcf92c1e7b42eacff69e","sha512":"fd39d8cadda86b15167af12fa75add9c89a0a375c715613c50c3270db93e916b7f3dfecbe2d9b5124bbe7d5dd3245992835ba2d0b36c333e0dfb71388afae8eb","ssdeep":"384:iRTtY52ltlsaUh9bZvL1TpFgmRDuxIS9QFVAqYpvR/kvDkmD15prZ:iRRY52psaO9FvpTpSmJEIS9QFeTpvaLF","tlshash":"6772d07611c1c6ce314ecc61d8992eae20dfa0cc67d19612fddc178ed1d9b80b96db88","first_seen":"2026-06-28T12:40:40.874132Z","last_seen":"2026-06-28T16:14:39.535247Z","times_seen":4,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"6299betoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"6299betoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}