{"report_id":"323c504e-923e-49b3-88fd-fb7175d0a719","version":6,"status":"done","tags":[],"date":"2026-01-13T17:16:45Z","url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":0,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"title":"Bet365亚洲官网","dom":{"size":138,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bc0703be001240bdd8a6e6ff16f19596","sha1":"7c799396b652deaf4fd4f48d01a332f11053388d","sha256":"af4a14c499b3b3e29c366984c00d84d24a78c69975055354cfa0f093f436c1bc","sha512":"f05fa334d0fa4afaee7f0b4688b895c409d25d69014088e876201824f3d60311b0f4df366aec96f260110936704205ff9f5a84e8470bd441dec4b62ad0575da5","ssdeep":"","tlshash":"38c02b0d74636148dd03115017c33240c488c33f685ac01008028483b0cf2bac4c23a5","dom_hash":"domhash18da208b3b39949e9ba09528a720f5c0","first_seen":"2024-05-26T07:30:18Z","last_seen":"2026-08-11T21:02:02.47397Z","times_seen":21062,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":0,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-17T17:16:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":348646,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":357,"sent_data":467,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bt365china.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":2,"received_data":15261,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bet365080.com","ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":154,"request_count":22,"received_data":2185854,"sent_data":11155,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089c9a978efe6faf1b325c551a99197","sha1":"f669f20f76256fa65eba68e591a6eac3842df33f","sha256":"f1402f35998a6f5e927b88fcb14a3df40d6fc3eb8d62547766dfa3542c1bb83a","sha512":"516cf801e0ad5cb53cd93efb3526d8fd3d08e12acb330ada0a8b7a58cee49da8809d11527d859a9420c0474f2e71007224de6e3a456f6f2f486fb63870e19be5","ssdeep":"","tlshash":"0cd0977298a7c4306ada014e20bac2ac3a1022d82b93b50085cecc1aef00dc3c4a2e88","size":247,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-07-21T16:23:41.00103Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc7e122581dc511acc74e7831a7b1d78","sha1":"3410ed25637934d5c71f8ef3677deef154069680","sha256":"69975abac770f069a02d58b8bfa7647634c8512bc2747ec4543ec13c3b64a2f9","sha512":"ede24095fa0bda5ff88a68b3befe804b6e9f9f8bd6114c0bf3487a84fdad410bb7eb9b905a6ae9d1b33d227c859f30c2c4c70850d15c59233131bdd2d10f9740","ssdeep":"3072:jNqb2R5+VmMSGczKUx8ET7q8inuho3LQq2PccJn6O10s6XwND:Bt+YMSDfzinuuLQq2PzYaN6C","tlshash":"f424e7d9b383746682a3b878503f120be17b6d92f44ccc98e18ac5d52eb86994177f7c","size":210049,"data":"","first_seen":"2024-07-23T10:51:41Z","last_seen":"2026-08-07T20:26:25.107596Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"427544a92942b7e09c412019ce7e10d9","sha1":"43b503fe8f86cb1628802d429b0ca969b6c3ccdd","sha256":"a62a0646faa418cc5cfe7691847a7e7919f3aecfe0df13c6f3b5be256a790fa7","sha512":"4e7bdf1beef372a3f0c7f95b749db34420730762e29e49d9d99ab2d633e5be4d4e2a3e54ab056a85cc9c45051e299ab6d125734c4c63dc3920ca6fd6d36fc792","ssdeep":"","tlshash":"a1d023e41b437d7b46ff19007f5b77457152731140409c708d555248113f9171954ccc","size":226,"data":"","first_seen":"2024-07-23T10:51:41Z","last_seen":"2026-08-07T20:26:25.110338Z","times_seen":358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/jquery.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T22:45:56.507754Z","times_seen":1014845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/menu.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","size":6975,"data":"","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-08-11T21:34:41.488146Z","times_seen":2550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/accordion.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","size":8814,"data":"","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-08-11T13:52:16.000314Z","times_seen":3481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/core.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-08-11T19:55:22.885458Z","times_seen":45824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b78b28b396646badfc6017235ee4be9","sha1":"18103240bf0cb760cdf7febc628b56b8fca44319","sha256":"215f517010a20f2f4c55d34dd3c574568bd0fb83662f0b915ddb6561f97c3904","sha512":"6b82e20e99e8a57178afd50be19a2d5ecbf7062879808d851b3b5aa2b0a8a629ef06413f19dc9a6cd7a22d23e5d67e133fb70ff8030e0f6d6a494260d0085739","ssdeep":"","tlshash":"a9d0123a6b562b320997a7a266efb7413b6306b564c105135c75c8892f34dc981754ca","size":260,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-08-11T21:34:41.610455Z","times_seen":9031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31370ae3f78a60279d29cd25e1eb8657","sha1":"34f454d9855d2dc1d71ab7101bd7a04d1b0199bf","sha256":"6682cf99413df38b7572d2f2eb9c549f33d2a52ceaa9c6a8ff723c02339380dc","sha512":"f4ebeae5d9f13044f3e78185d41c7f95f7a02f36a5fbe67b8768aedd1b9eec5a6d4d06f61f1bf2f9f4fc102fd79dc0e6cd748a4e42f32876c67e1bd701eab10d","ssdeep":"","tlshash":"32a0011a8449927276704000e61f6384a81656a5fb91f06b410b2120b27d843a0141b3","size":84,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-11T22:00:51.310733Z","times_seen":12266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/jquery-migrate.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T22:45:56.523085Z","times_seen":929670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f5c51e73166449559cfac46c20b6a26","sha1":"388568ed11263151e90577d2f49ffcd0d1a7cd75","sha256":"828aea9be270e51c9a20770602fb7ca4b83af6a5541e4a668f30cf4df54b7714","sha512":"a176b63a1e4f772309c249aae06113c3ac88cae57af141c0e75fc7eafc3db5c6fa9fce5cd09025b20b0ff56e2d06cd3e21c0958acb0e4e483e4aecde707a205b","ssdeep":"","tlshash":"d3d02b24198c7b57af8195cdfd5ca40795e18635a2270899c5d143dc410dfe0424bf3b","size":279,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-08-07T20:26:25.112269Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/lazysizes.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-11T22:00:51.295565Z","times_seen":12681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbd7e972603064755e092401d2b1d4ad","sha1":"ae1fd4b0f6286ab4b2cbede8bcb62c0d97dd9f42","sha256":"7e4bf1bf3034aa801a7f65e824aa612a3ef2277e402a2b82093c9d6e8f3fbc26","sha512":"7826a9da31a65e02abe6fad737ae1c2ec28446cdc93abd93b473f3411e84bcde309b97a31e2ab9db95b764980072a890f431af9f866652fd2fe41824806ce9eb","ssdeep":"","tlshash":"06c08c2f40029833c1aa228c8f854937f4ac04bc81099a3eb5a444cd1e288f72ecc92e","size":158,"data":"","first_seen":"2023-12-12T10:08:08Z","last_seen":"2026-08-07T20:26:25.11305Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d794033096711e736dff1a2fdbff0a24","sha1":"a9d7415265a41ed3c195aaf6726f2dca3207a09c","sha256":"e0bd01ca83ebd8bd5ccef2351a35668524426a964345e311543f1a3a2a189f72","sha512":"6bb5191eb67197883b66518c2b38997b4f7fa5f71ee19b590ec35b2c0fea83770dae7b31b4ae0442446777fc05003beaa79d8a820612b26df1b386bb1b9c91cd","ssdeep":"","tlshash":"fa110a3920e8a13ac7c6609e20bdd3ac3e7c21522a0b6040806ddc5dad10d57c86fdba","size":1074,"data":"","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-08-07T20:26:25.11373Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-11T18:05:04.113692Z","times_seen":98970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"42b2ea66b57910b4ec83bc93a37bdbd4","sha1":"dbf66e3c2ab315881eb6a75d36be150941fe4cdd","sha256":"9d91ca825a3b9f739c5aebb3f4cef0ee36ed042c6cbd1be5e3b1d993ac2a15ed","sha512":"b5a816f970c08707b8cc2c96d265c98c00e6df4a134625342fe8e7ae529f91f2d7af8c802632d7839db300f0826f48b618a062c76e69c50a51e42029c79998ec","ssdeep":"","tlshash":"6c9002a20c622447d0844020b93a0141c07943418016c604158c604100486886005ba3","size":54,"data":"","first_seen":"2024-02-24T00:51:05Z","last_seen":"2026-08-07T20:26:25.114433Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","size":111,"data":"","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-08-07T20:26:25.109091Z","times_seen":524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","size":4895,"data":"","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-08-07T20:26:25.09658Z","times_seen":534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bet365080.com/files/menu.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/menu.min.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jan 2024 07:08:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65b74f00-1b3f\"\r\nexpires: Wed, 14 Jan 2026 05:16:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6975), with no line terminators","md5":"7f79dafc27c57108eb5c4cef9c9b5e7b","sha1":"c51c81cb212089ebb7bf4675083f0ddca8016386","sha256":"174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296","sha512":"c5237efc21b3ce5d85733c6d6ec6edf975b2de1d46aadde3535f69966577b842273e242f17a6f82ec7d5bc0e96fa562a1293ae2f519d7dc04041d6e0a265c5b9","ssdeep":"192:ssQZgPOLqHZb4ooYJQDi9EFhylT/fntx7bvH:sDgPOLqGooYJQDi9mhATnnv7bvH","tlshash":"2ce1e0ea9644127b04ef29c670e6e9c43b7568fdea0184313579c84d1eb8ec201e6bf9","first_seen":"2023-03-29T21:09:45Z","last_seen":"2026-08-11T21:34:41.488146Z","times_seen":2550,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/saved_resource.html","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/saved_resource.html HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T22:58:30.197246Z","times_seen":549368,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 412\r\nOrigin: https://bet365080.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://bet365080.com\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\neo-log-uuid: 4192187118173985979\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":true,"data":null}},"time_used":942,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T17:16:22.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 19 Feb 2025 13:35:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b5de08-de35\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.118.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":56885,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (21269)","md5":"82f3f5141f20597188eed5200ce0e9a2","sha1":"be678ab07ae62712f592131fb88761b05398a820","sha256":"de31bf710b83378011a9ff5c3eec4dde72fb88e571d39e6dcc2535a3b541f2f8","sha512":"3a1356c7edee93f25e6c33baea4d34f541eb00d23602a9b7a962a86f14bfc96c37e0b3aaa79d94b319d115993485714307e94f637888af11d9e87dd99e730ecc","ssdeep":"1536:JK/SEbtJpbXBFny+g2j7XNtDotXNtDoF6Vx1ICOcw2i:JKvpBN3lj7XNtDAXNtD5xGF2i","tlshash":"124339e26a9b113f111a62cdba10a75872c3908ccf754e8bc3fd65c81bcef49266195f","first_seen":"2026-01-13T00:17:44.541954Z","last_seen":"2026-01-13T17:17:07.796063Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1578,"timings":{"blocked":636,"dns":328,"connect":151,"send":0,"wait":303,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/dyts.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/dyts.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T22:58:30.197246Z","times_seen":549368,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/jquery-migrate.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/jquery-migrate.min.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jan 2024 07:08:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65b74ef4-3509\"\r\nexpires: Wed, 14 Jan 2026 05:16:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T22:45:56.523085Z","times_seen":929670,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 210049\r\nlast-modified: Mon, 29 Jan 2024 07:08:37 GMT\r\netag: \"65b74ef5-33481\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210049,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (3035)","md5":"bc7e122581dc511acc74e7831a7b1d78","sha1":"3410ed25637934d5c71f8ef3677deef154069680","sha256":"69975abac770f069a02d58b8bfa7647634c8512bc2747ec4543ec13c3b64a2f9","sha512":"ede24095fa0bda5ff88a68b3befe804b6e9f9f8bd6114c0bf3487a84fdad410bb7eb9b905a6ae9d1b33d227c859f30c2c4c70850d15c59233131bdd2d10f9740","ssdeep":"3072:jNqb2R5+VmMSGczKUx8ET7q8inuho3LQq2PccJn6O10s6XwND:Bt+YMSDfzinuuLQq2PzYaN6C","tlshash":"f424e7d9b383746682a3b878503f120be17b6d92f44ccc98e18ac5d52eb86994177f7c","first_seen":"2024-07-23T10:51:41Z","last_seen":"2026-08-07T20:26:25.107596Z","times_seen":357,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":472,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/download.png","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/download.png HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 May 2024 15:26:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66589ac2-348e\"\r\nexpires: Thu, 12 Feb 2026 17:16:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 326 x 155, 8-bit/color RGBA, non-interlaced","md5":"0eec17f14f0dfcaa5765cfa48ff5ae69","sha1":"427e8f5cf2baac18ebe123c0d84729cac2a60cd3","sha256":"fc31f3ece2538a4b6602cc347a4b22286ff8c51f1de165b1c8a7f361b16d5563","sha512":"12a64c7a4ddd1513357f11e6b1b86b64fe7896e38fa444e65106a1b8e6cf3d23d385e3f047dbec088bcda06d6aa113d9bbe8a00c1ea1b6e4d01cb126ccdc4c98","ssdeep":"192:iSHIIHUCD4waMtH1NR3Wr2Dc2vyqxoFRQxS3NEtzrvQQZTM5ULkrtzctbv08zA:950wjH1N1W2LvyqWeWNSzHGULgto88U","tlshash":"6252afa4d01d1af2e2c64e6beace1409d128cc59f12d0f39f3f5b2f9f978a903615549","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-08-07T20:26:25.084285Z","times_seen":356,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/autoptimize_single_27b0dc2f338875a59ce815367b703646.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jan 2024 07:08:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65b74eff-131f\"\r\nexpires: Wed, 14 Jan 2026 05:16:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"333682959b8b63343202d7ef6858f6d8","sha1":"3b4e9fd055ba7efd5b4e69f6f32b834e4a74b877","sha256":"cfdc52d688c16a02b9dd455bdf7571a7facd26bed96f87240d0a1bfdcfaefb8e","sha512":"bc1814af152c69480b504b3646b640647d51daa05a6ce74bf65da621c86d5fa976f8ba5105f5dbd642560f83551b2145d37f5d2260ccb7491145b615fb321a0c","ssdeep":"96:ksz2LtirZRu29KQ2x9nQzUQy7xWSDx4m4GfiMQzFcZ:H28qHQybGQbQhcZ","tlshash":"fda165a1b05474dc1eb22388e94f3b0df227a627811cba08d4bc566ceb71781e619e5f","first_seen":"2024-01-21T13:19:31Z","last_seen":"2026-08-07T20:26:25.09658Z","times_seen":534,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bt365china.com/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png","fqdn":"bt365china.com","domain":"bt365china.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bt365china.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 01:31:14 GMT","end":"Tue, 24 Feb 2026 02:29:50 GMT"},"fingerprint":{"sha1":"1D:D8:69:EB:7B:4B:7B:68:06:53:9F:60:1C:59:29:FA:CB:3A:27:DC","sha256":"4B:05:AC:63:93:43:CC:EB:4F:3D:33:73:CD:60:98:58:37:90:E9:BA:C9:50:20:C6:66:D6:BE:97:8C:40:8B:8E"}}},"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_444444_256x240.png HTTP/1.1\r\nHost: bt365china.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 6992\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Mar 2023 07:55:32 GMT\r\netag: \"641179f4-1b50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3447725\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PogiqS4bUgzdKWOvwrKdA%2FemYwAA1tdJScp23usmAPI6Rb6FCUJgyXHzuFxJsaaXLqMUihUr86pqnLKnsITmI8SlM8GZcg2G9L7H6g%3D%3D\"}]}\r\ncf-ray: 9bd68a883c8e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"610f324f0e4eea1e922024fc960ba206","sha1":"e48cbd9aaafa1c2a45ef6fa9e2790aa3c4fcc045","sha256":"4f13ad3e71cbbadf0df2c3c7e3806017c541ed0bcb6cacc2f0dfe0a4e61a11a7","sha512":"0947a856b2c7ad8ee65834c9ee3bf815a457c933480aafe1d4bf54aed72102c2cbd92193976a316d17227f54c0aa97f338cc77e7859c8ee7d7783c6a3987aa5a","ssdeep":"96:Z+ZYGBeZMj+hjoHCZiDRCDNcdtQoWADxe4gIHazizKsIOvxx2mcLG0pBlpWttZxb:Z+Rj+h1W28yoh6IHRzKQxrs6lx5ATUFj","tlshash":"4be1ae5b7807865949ff54b5824307a9a8f3df1fcb6693d6f31080a27e13bb44426b4c","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-08-07T20:26:25.103912Z","times_seen":494,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":21,"dns":1,"connect":3,"send":0,"wait":10,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __vtins__3GRNqmDvKbizKirz=%7B%22sid%22%3A%20%22a7bc3137-3f9b-5ecd-af45-5059f449472e%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201768326383940%2C%20%22ct%22%3A%201768324583940%7D; __51uvsct__3GRNqmDvKbizKirz=1; __51vcke__3GRNqmDvKbizKirz=7bb76134-6522-5ff0-b6b6-6e960a3e64e4; __51vuft__3GRNqmDvKbizKirz=1768324583946\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:24 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T22:58:30.197246Z","times_seen":549368,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/qr-code-5-1024x1024.png","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/qr-code-5-1024x1024.png HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 29 Jan 2024 12:27:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65b799a2-156459\"\r\nexpires: Thu, 12 Feb 2026 17:16:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1401945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"0e2862ddd3b033b1f920f6aee39676c0","sha1":"6c49e8739d9918e46b2ee2afea8724b93087436e","sha256":"8c2a772270d9bfa150ec823ddb6f19bacb4025f66164b6fbf6198916324c9bdb","sha512":"ff0c33d9b46087b6069427e7e76d6fb0da773e17c542b05ed9a8ff354b7ab3c426924c651914c8bcf52d79fcfc7be292c70eafcb501581d1f397ecf5adbcd479","ssdeep":"24576:EdpICeuctJLmSORFsZ5a4sQNqUMpRGnqM2mH9:EdpIKMJOzC5a41NwRGqlW","tlshash":"6b2533dcd5494a072b06c7f65006df1d9cb3fbc92480723da64b16f2ae48bbd63a911b","first_seen":"2025-08-26T02:20:55.751221Z","last_seen":"2026-08-07T20:26:25.0875Z","times_seen":454,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/accordion.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/accordion.min.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jan 2024 07:08:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65b74efd-226e\"\r\nexpires: Wed, 14 Jan 2026 05:16:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8632)","md5":"7849e0aa35f335f3816b71dad422ceb7","sha1":"d81bb30d45fe1b5f4a92056448d4ccbca14202be","sha256":"3b0a04f5aa3291e26f44613add53e1bbd56a09147f6a0b390dc4c3369dd1731d","sha512":"33fe3092d7eb115c21611393230acc55b51c5a809fc77dbf64a5e94384c647a6bb6835f11d07cd099c7a461065e3b97186611426af4986978576a829c94006bb","ssdeep":"192:ckAWfVDXgV2R3L9fYOdIcy9LCMbp38DoDMutfzC:ckAWfVDQh9T9eMM6fG","tlshash":"fb025708320439f1689a41e5942a5e4fb17271dc9805489cb23a5dcf9bedd84b36b7bf","first_seen":"2023-04-01T10:44:41Z","last_seen":"2026-08-11T13:52:16.000314Z","times_seen":3481,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/ico.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:24.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/ico.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nCookie: __vtins__3GRNqmDvKbizKirz=%7B%22sid%22%3A%20%22a7bc3137-3f9b-5ecd-af45-5059f449472e%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201768326383940%2C%20%22ct%22%3A%201768324583940%7D; __51uvsct__3GRNqmDvKbizKirz=1; __51vcke__3GRNqmDvKbizKirz=7bb76134-6522-5ff0-b6b6-6e960a3e64e4; __51vuft__3GRNqmDvKbizKirz=1768324583946; _ga_1N67MN70YG=GS1.1.1768324584.1.0.1768324584.0.0.0; _ga=GA1.1.1088311961.1768324584\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 801\r\nlast-modified: Mon, 08 Apr 2024 15:56:31 GMT\r\netag: \"661413af-321\"\r\nexpires: Wed, 14 Jan 2026 05:16:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":801,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"e1a894233ef56b16f65cb4ac73928aba","sha1":"be3c60966ef97df1466aad6f3fdc4ea32f3c1118","sha256":"459eda1e023bd3142884157e3d5e16b885b4ff78572c66add9acd3af204945c0","sha512":"cd844ed14c458e98986c2619eed9cb4aab054dde4ccbb9f6afc85950b0c7b056ef62e20035c6553452496def5dba841c639e6f77fae7b67a91b914b8f116338f","ssdeep":"","tlshash":"b01165190945c2a6ff5b5fbc2570577f4a00b74dea25d887e070c9c0221a1fa2d0f194","first_seen":"2025-09-22T09:22:17.64852Z","last_seen":"2026-08-07T20:26:25.098133Z","times_seen":166,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/autoptimize_7d6f4436d919a3ef753cc492abd61917.css HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Dec 2023 07:17:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65853822-3c395\"\r\nexpires: Wed, 14 Jan 2026 05:16:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246677,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"c02dcaab59e8fb9aa9ce07396145082e","sha1":"97a5cc39d9ff796fa6e29bb7e166d31a71d431aa","sha256":"33010abae2635ae28361a6b11251ee70db9bfba44dba08cb637248cac7e3a5b8","sha512":"edaa51d740f33a7d74ef754a976876ea5c9a234d8a7d1ffdb5f6a9e015841ccc7c614fc844482ba49f1a49a1f9730c9d1f131271cbe335e030447706b8cf004c","ssdeep":"3072:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzBXibqoeSp:Yk2u5SOV+UQ3Zo/0kPlQGXibqoeSp","tlshash":"c834b832466288ee7a67533b9c59655c928bd341cb89cfeff13bc12892c464128b3f75","first_seen":"2024-08-30T09:24:08Z","last_seen":"2026-08-07T20:26:25.100718Z","times_seen":336,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/analytics.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/analytics.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T22:58:30.197246Z","times_seen":549368,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/jquery.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/jquery.min.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jan 2024 07:08:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65b74ef3-15601\"\r\nexpires: Wed, 14 Jan 2026 05:16:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T22:45:56.507754Z","times_seen":1014845,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-1024x467.jpg","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/Bet365%E5%AE%98%E7%BD%91%E9%A6%96%E9%A1%B5-1024x467.jpg HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 29 Jan 2024 12:09:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65b79564-9156\"\r\nexpires: Thu, 12 Feb 2026 17:16:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37206,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x467, components 3","md5":"d6104a2535e410ab1de8347a042fdc5d","sha1":"8ca0c2fdf574a81cca7222c1356b6fa0499c2813","sha256":"607eeb1fa042011585a780173347fcfbbde879dc17e31ffa14f24b73c10ba4a3","sha512":"26f449b286b62e218a00d61484d4b504226af92b065ff2f5d5245b153edf246c1a08a2ea6d30aea8bff3de0a4c4d76260e1e425dd1c63fd36c60b1389ff1fa8c","ssdeep":"768:NHb+9jQAMr6/Z9E19snBXbYotE9xCoJk8aX+Abga1xawG3unvV/:NHbWjTM2Do9sntzy9BaX+Az11tnvV/","tlshash":"e0f2aefab73f0736e84c893f01e06215a6548b9540c5ba8b3e7d52a0c1b9bc15fe38b5","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-08-07T20:26:25.095726Z","times_seen":403,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/lazysizes.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/lazysizes.min.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jan 2024 07:08:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65b74efb-2655\"\r\nexpires: Wed, 14 Jan 2026 05:16:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-11T22:00:51.295565Z","times_seen":12681,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bt365china.com/wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png","fqdn":"bt365china.com","domain":"bt365china.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bt365china.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 01:31:14 GMT","end":"Tue, 24 Feb 2026 02:29:50 GMT"},"fingerprint":{"sha1":"1D:D8:69:EB:7B:4B:7B:68:06:53:9F:60:1C:59:29:FA:CB:3A:27:DC","sha256":"4B:05:AC:63:93:43:CC:EB:4F:3D:33:73:CD:60:98:58:37:90:E9:BA:C9:50:20:C6:66:D6:BE:97:8C:40:8B:8E"}}},"request":{"raw":"GET /wp-content/plugins/faq-schema-for-pages-and-posts/css/images/ui-icons_ffffff_256x240.png HTTP/1.1\r\nHost: bt365china.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 6299\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Mar 2023 07:55:32 GMT\r\netag: \"641179f4-189b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3398702\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7s14F6PZ%2B8uC1DypOcS%2BHr%2FVJysLyjj5PxaBrQ3W6CcyKdsse3cUNBYzy1%2BXug5hYpcKr61ptFs260z%2FbZjHfzMcI64a4oMZHSxaDA%3D%3D\"}]}\r\ncf-ray: 9bd68a882c8b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"e06d47468baf2b7e615649723f416fa8","sha1":"c40994a9a7316f867bf9a314f6cd91d39c152062","sha256":"554a0d36028e599d7082f5e9660ea9457c046c51917ed5330efebbcd912eb40b","sha512":"a9f80e9963a9fdecbf794e9afbb4a50487f7b4c7369c3955d7687a62dc4e667665a2e8c424314575a96fcffdee74c2e25a5857b6c22f5fb465facbe17319bc31","ssdeep":"96:VBEtDvVfqOGSF1xCeeJ/QH7B5jbe7+Fc4l2bD8iT8JGpy13AeUYzHRNENQ//mcg:VB4VqCW/QH7ze7+DsjT8UpuAeUlNiuj","tlshash":"0ad19ed16a3bede0c4e6ccd93d6d736183b1c1494f29e67ad1edf9481d0a141b0a0baa","first_seen":"2024-05-03T17:06:37Z","last_seen":"2026-08-07T20:26:25.092216Z","times_seen":491,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bt365china.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/cropped-Bet365%E5%AE%98%E7%BD%91-192x192.jpg","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:24.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/cropped-Bet365%E5%AE%98%E7%BD%91-192x192.jpg HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nCookie: __vtins__3GRNqmDvKbizKirz=%7B%22sid%22%3A%20%22a7bc3137-3f9b-5ecd-af45-5059f449472e%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201768326383940%2C%20%22ct%22%3A%201768324583940%7D; __51uvsct__3GRNqmDvKbizKirz=1; __51vcke__3GRNqmDvKbizKirz=7bb76134-6522-5ff0-b6b6-6e960a3e64e4; __51vuft__3GRNqmDvKbizKirz=1768324583946; _ga_1N67MN70YG=GS1.1.1768324584.1.0.1768324584.0.0.0; _ga=GA1.1.1088311961.1768324584\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:24 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T22:58:30.197246Z","times_seen":549368,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/cropped-Bet365%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91-e1655806489200.png","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/cropped-Bet365%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91-e1655806489200.png HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 May 2024 15:26:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66589ac1-4ae1\"\r\nexpires: Thu, 12 Feb 2026 17:16:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 164, 8-bit/color RGBA, non-interlaced","md5":"be742d90d7600e586627ccd00de71e51","sha1":"207739b09d723b1597a6c1b05913a6274b717d0e","sha256":"86bc7b7136cea1239985874b94ecfe418c974e644e422807f5d46f6eb6a9891a","sha512":"93d105cfe7baf6fb749491f08a8624be70bc45f9c9ccafee5a206c73086f2ea735730e3eafd5817dfa01671d9be658d1bf15949d7299ea8cfee25d26c7e2c635","ssdeep":"384:i0weiTRf+DGSmVfkVq8BmtxU2DDzvRSGCugFsmHfRhiCB8:isiTjSmVWBmtxPvRUugFsmJUj","tlshash":"b582cfdd62f01a49bc965ede2c16f4ca0b36cac25a45252ccf2337095f98679eb0391f","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-08-07T20:26:25.104602Z","times_seen":356,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-1024x509.jpg","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/contact-us-%E8%81%94%E7%B3%BB%E6%88%91%E4%BB%AC-1-1024x509.jpg HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 23 Dec 2023 08:29:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65869a75-98fb\"\r\nexpires: Thu, 12 Feb 2026 17:16:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39163,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x509, components 3","md5":"16edb64fd4613886c9a432077efa4e70","sha1":"e10f2265300915acedd37fc4944515d04f7162ee","sha256":"34ece1c007347a1739332e6e6d0c32fb5744848fe879c029694f21d9fa999cf4","sha512":"a5679ce594753c4593ab19553f0d479a11b1c9cb94aed918fc4a55b41f1362871691e06fd02c8cce17b93b93ce09bbb954d51aba5ee9a26bffafb11d24f49bdd","ssdeep":"768:jbCBajMChvfcN20lMqCulxLXqN2rzVjQlCd4bhj+sy75eXTuP+Zpyvzu:S8VfLqCu7LX82nVjWW4tasbTuWZr","tlshash":"7c03f1627782470ee3bfbc7c311cbba48c0f50500ddadbd9d2b0b669889b9c191d66a1","first_seen":"2024-07-23T10:51:42Z","last_seen":"2026-08-07T20:26:25.09744Z","times_seen":502,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/core.min.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/core.min.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jan 2024 07:08:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65b74efc-53be\"\r\nexpires: Wed, 14 Jan 2026 05:16:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-08-11T19:55:22.885458Z","times_seen":45824,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet365080.com/files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js","fqdn":"bet365080.com","domain":"bet365080.com","tld":"com"},"ip":{"addr":"103.203.41.166","port":443,"asn":46261,"as":"QUICKPACKET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet365080.com/","date":"2026-01-13T17:16:23.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365080.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 09:38:22 GMT","end":"Mon, 09 Feb 2026 09:38:21 GMT"},"fingerprint":{"sha1":"59:F6:CE:29:40:AE:17:C8:F4:9E:C6:34:F4:31:A2:C4:4B:39:DD:F8","sha256":"7A:73:B9:35:C1:5C:79:DE:D0:F4:DF:2F:A0:9F:3C:FF:EF:00:65:EC:BA:66:D7:42:A3:CA:7A:1B:4A:71:0C:41"}}},"request":{"raw":"GET /files/autoptimize_single_764d32b67bea87de1e6968d08946f884.js HTTP/1.1\r\nHost: bet365080.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet365080.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 17:16:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 111\r\nlast-modified: Mon, 29 Jan 2024 07:08:46 GMT\r\netag: \"65b74efe-6f\"\r\nexpires: Wed, 14 Jan 2026 05:16:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"c33e08bec0988ad10f73047653a65772","sha1":"77b6ca07cfd992218ff822421354b93fa8c5e6f7","sha256":"12b6742262933edb939e8114acaa11f2d100a1da507b1fd56ea3fca9fb3a5f10","sha512":"54bbe7111e57b85f600e5e6529fb010b96775257c83989cd199ab11611b6de9eea1c94e55da42e547dadff984328a870a79f76af3bde3f7be20352aef1c96abb","ssdeep":"","tlshash":"91b09b555409704c4955e95451355e89203762509469502de70584682b5014598a1514","first_seen":"2023-03-10T16:53:54Z","last_seen":"2026-08-07T20:26:25.109091Z","times_seen":524,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"bet365080.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"bet365080.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}