{"report_id":"338b7c19-69c6-4d4b-add0-bf477d114ada","version":6,"status":"done","tags":[],"date":"2026-01-15T01:32:37Z","url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"bet83091.com/poker/186#","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"title":"365英国上市官网","dom":{"size":238372,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"701335fc40a51d6e1b40ea1592041786","sha1":"0b97feabbdf3e11d4d60e2aeb3eb1aec4e2e2b59","sha256":"3bdc0dfe95ebf1653fff7281bd4ce47dfa069bef14f580e5f10f668c0f95a073","sha512":"0723ace24e9387d8ace1a13e46b86959405949f983f9922d8db51ead1a5b321606a6cb8f1593f23cdb65450506110d88c7bfff3021fd9b6891f477d494425f2b","ssdeep":"3072:7QNoouchCEPHhoysGVEJU4HJ7nq+g7097BALRs1fGmnJ3NlX33X3K1+QDWrOENsa:7Q+cl/2ysGVEakFe70HAW1f3nJHX3Qla","tlshash":"63349e5069f69423007381a23eb67f1e6f81e143d90aea1437fc5b949fcbd8ba56325c","dom_hash":"domhash1e0f6837308e6af16cb2fe0c42f7844d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-19T01:32:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-15","alert":"Phishing Block","trigger":"bet83091.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"3f38sfb.segrft.com","ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"2022-03-19","domain_rank":0,"first_seen":"2023-09-14T23:21:23Z","last_seen":"2026-01-14T14:45:00.902206Z","alert_count":0,"request_count":96,"received_data":2123766,"sent_data":45132,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bet83091.com","ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2023-07-13","domain_rank":0,"first_seen":"2026-01-12T00:23:35.325977Z","last_seen":"2026-01-12T00:23:35.325977Z","alert_count":48,"request_count":8,"received_data":416148,"sent_data":7870,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dd754eacbe55b3f13267e04f2b96e77","sha1":"4287e64327c3fe2a1dac4ca1ce0c96d65b8c8204","sha256":"dfdb1425847e227374753962612ba884844a0e7e18dea354a86e826fc07f7852","sha512":"a133814bda288f19893b823845a11ee6ff20c6a28328cb7df479541b09f4c6ce2b10e3507201f1440e249d89caff425c9c7de7132bf76e09d86d88534a74b7fb","ssdeep":"","tlshash":"2d21c2a8ea717120508641721ad3495eb914b2a7ce2130183b8cab272f5d86f77bb18e","size":1384,"data":"","first_seen":"2025-10-27T17:15:51.498334Z","last_seen":"2026-02-04T23:57:24.541863Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"518d0aeb1403f37898ed1d61e7608a5c","sha1":"583c9ff4f546aafddb8cc3b8cb8fa702cfe879de","sha256":"38fce4cedb08a36d1c0ab60584f5e235a1f90202abfd1a99868c2c006f0ae85d","sha512":"6f31a05e196b1c4d1165ee7616ef0eeb58605a7c254d4152ddd3505e2780a29f9fe16c8baa39c48d2425434cb5754c160eefef2ffe2438fd75e4e9a3d32bdfe4","ssdeep":"","tlshash":"1b21123ae042104406a7e0bd888a285120800c03cf482a08b3cc92958fad3cf32f3ace","size":1293,"data":"","first_seen":"2025-10-27T17:15:51.493557Z","last_seen":"2026-02-04T23:57:24.553028Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9676123f2d3a841a6f0aec355bd6e49b","sha1":"ffd249bc9c851b3f469a5e1da0b6a41d46d0b26a","sha256":"d10c8f36788e5d4a8e5507252d5c02b5a6f5823f3be19fd40ce245c435108694","sha512":"6b23b822ed86332887308937c3712041db2213624c3ebc364645ef606a6b3005484f95cc28cd9ea6d4c7bd9d410b80b323c59579cf6275ed57186c1b7f3e2e09","ssdeep":"","tlshash":"4821cd58da707120504541311a93465d35507297cd253018375cd7131f9d89f77bb54d","size":1440,"data":"","first_seen":"2025-10-27T17:15:51.49472Z","last_seen":"2026-02-04T23:57:24.550961Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"38b26f53d6654a854c79e7c28bd29d0e","sha1":"fe0555f8dae05b3f3966c0bd312678270ae27b9a","sha256":"f16b3b08a2e8e75007d22dab8da58edd0aade10518042c1fc8d5c0d96b18e3f9","sha512":"664c853a31b89350df2c456c55d6dc1954a600313dffd087bd843dc880f4e03dcb81e8121ae14fd799ef11498bb464bd885e5902603bfb54a193d2a914344197","ssdeep":"192:aNeTmZW8XQcTtEtjKRzfQhFxhBizH4A1ltpKS9:UrWMGj0TQhLhBGplt0S9","tlshash":"ec021005ea1909924492937938d71d27229cc187ce41301e7fec4ab92f9f42fb8f765e","size":9013,"data":"","first_seen":"2025-10-27T17:15:51.505882Z","last_seen":"2026-02-04T23:57:24.544737Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ae8c88654991aaf805526145c814fbf","sha1":"0c5fc18728a3d521a1f57cf500cec8c78c389a27","sha256":"0ac12fc0f5a262ec62bf62b538272824558d20e586a527b276115326fe22c47f","sha512":"5ce8e8e1a32512f3cbbf4a184de340065bc8e399c2a0b77b57d108f8abf805635f57cec3def0623fc2a8fb6dd034c7d4349773288b2b1a80261cc875267e862e","ssdeep":"","tlshash":"bb41621af4d78728147736ba97bb23471d32148fda8ece0cbe5c0bd0cf2a25a5182708","size":2215,"data":"","first_seen":"2025-05-01T12:50:14.365874Z","last_seen":"2026-02-04T23:57:24.551595Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/assets/js/caller.js?ver=1675418258","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e7441dc033395b76a96b25b6efef0f0","sha1":"c833e33f4a95efa559a847dfff036cb904260b48","sha256":"80caabbe50f5f83254e2545d01bacf299c7f417a103e912bd41d6c330a6e4f86","sha512":"e96041ac2b7106fe9aceddc1faa3e996ffaa97945d56cff7b3ca0697492cf6ff53f6fc3826319a85eb360e684a166c0c8c075118a37655312dfbf231ff9aa167","ssdeep":"96:veR5suijTWxKhgCBTSCkAjnhefPMm03OMu9eqeeV0vMu9eqeeVqgYi:veR5su+TWsU1eO70v76i","tlshash":"dc914212de042051f76332b85a55661f6131684f7f8a888dbcbc747f9b70acb857d189","size":4386,"data":"","first_seen":"2023-03-13T18:11:33Z","last_seen":"2026-07-25T02:29:56.41883Z","times_seen":5054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b578ee0ed04871f57faa8ecda86a310d","sha1":"7eeb54e6ab5ae7fe3b4ef861056a31d15160917b","sha256":"baa26bc4890eac368c061ba7a56b0fcebc0579d33f122348345abbd4eb3b7684","sha512":"9ec494b4f5437df20a5af5eced7f7e65b7b5c1e50f6e59e976d3dab204b6fa979c5dfea2104c6522b9c030dbad25a46743a62dc3175e032906900c0de6ac16d7","ssdeep":"","tlshash":"07419246d3e56137a52aad384caee1169a318003dc3f3c74b9c09a54df5e62c90feae1","size":2090,"data":"","first_seen":"2025-05-01T12:50:14.380573Z","last_seen":"2026-05-16T11:25:10.589736Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/plus/js/unite/crypto-js.min.js","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","size":47992,"data":"","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-07-25T02:29:56.444036Z","times_seen":76980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6490d794ef5278c3aa1aa3424b29ab8a","sha1":"027e4a8942c8c7b9c8e6ef3c6481ca5c821e24a2","sha256":"118be42bc1285895ef312220a94d0b7185c506a14ea4e5c2a7f1bf508e746e10","sha512":"28d2aa74e04987557108b8f970298265a1f1181c9c978d5e653fafa95eb60017e1e855305b54798ed6010f88c31d306a2b8140ea700e2adc1ad7cda858e4b665","ssdeep":"","tlshash":"f121c2a8ea707120508641361ad3895e391072b7ce213218378cab2b5f5a86f73bb58d","size":1408,"data":"","first_seen":"2025-10-27T17:15:51.481081Z","last_seen":"2026-02-04T23:57:24.556145Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b4de34b92990ab4e5fda3e5d38af68c","sha1":"38d0ddaa741443cd249fc4685ae88bf3b7aa4de7","sha256":"27258a4d0615b9990aed14349b613f47f10d60d155196a62f44a15fc91614a40","sha512":"3e7d7f018b0a582d71b3fa95a336769f23051e1cbd9e2c809112ee21e6d9e5d62b54f2dc19b99507c64416180dee430151149ba8f3f38614da2928d48cc65f5a","ssdeep":"48:E88hfqDG9Mmk2xp+phzOgOOfDYU2olo9M1CSl525R2yfuB2yfBb:E86dxuwE69WCMMUyf3yZ","tlshash":"45a1ce29e9e76504812330768fef5008b138a503c828ad687f4c92532fea42d92fdb6c","size":4858,"data":"","first_seen":"2025-10-27T17:15:51.503568Z","last_seen":"2026-02-04T23:57:24.538309Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"72bb4739ebf0760536403f008e422933","sha1":"6325d0d58f722206874e2267bedeade7e4a13f82","sha256":"360442fd7c9b737941d023852f73b4f9a4da73ae31594a91b74752fb859222de","sha512":"eb5168947b9e017bf3006810d5682c1372b7b5619f176775cc24eeca5b5a2d881acede9a39bceab4a41f74a81f199df5a5dc9bab91807452414d0b0974d86540","ssdeep":"","tlshash":"7e8127a2dd1402b24196633236a30b522a51609bde513024b7cd95b44fce69ffeff6bc","size":3849,"data":"","first_seen":"2025-10-27T17:15:51.504778Z","last_seen":"2026-02-04T23:57:24.556752Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/sweetalert.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f9966a615f3f46d846807adbe42644f","sha1":"441544c084828da55ca0bafdc4c3df7dc7020820","sha256":"be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c","sha512":"e85f14552c1b5837780990e210223c5d6f532dd55f16589f682d1f2f95acc540b715aaac23ce12f871661006f80ec9043a9674dfdec1c3efc0819125d492dff6","ssdeep":"384:Rigwo5UpVZG9lOUlgkhzj7FRNE82XyySyTYayWri/SRVRXFKP9nWZcT2Rc8ex51f:RiB8lOuR5wSWrrRVR1KP9WK6Rc8ex/","tlshash":"ad72c899325438b327e361f1009f504ba4b196bde8095861376cc9e62ff8cc95ae2f77","size":16994,"data":"","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-07-25T02:29:56.422556Z","times_seen":7195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c12a93c6ee48b1e2aa4fce66a72a4ceb","sha1":"e83029e49ce3a85962a8fa3dbc8340075d2af8d0","sha256":"b2542c7f5cc3318a256e48902adcbde0ff828e5453fa79eda3797f036af07d22","sha512":"27acad5518d71d37be9b16a8cd330a914ce2b08f78f508671a4618cb5f6c5bc10e550e7bde6f76dea88dd8540b92e942be5eee0a2f05e6d42a90c74843382a7c","ssdeep":"","tlshash":"b441ede9f4e804004427ec7cac1fb19b21aea00ae04cc831b5ba60c19e212c9569be96","size":2042,"data":"","first_seen":"2025-10-27T17:15:51.486887Z","last_seen":"2026-02-04T23:57:24.540346Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/unite/jsencrypt.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"64507221feddff84c80b99c98827d76c","sha1":"5c7000638c6bae1a1c448367822a8682d59d371f","sha256":"5a0be406a1bdf94a25a9d142d4124e3dccbdeb5593cd78fb0bd234df89dd7389","sha512":"cc3beba9e9c0d1e149642c41b2bcb351972f8a1bcd9445dbb5e32feb6c91c5d851e2cecad5a6b3f8b8ec4727e4e8cf9824bc80244baeaae20023c23c1a02c2f0","ssdeep":"1536:cJxLSEwwmr2yZPp8yQPj6OR1fdfqovoRonm7f6T:cPErPp8yQPOOR1fdfqg2l7f6T","tlshash":"cb43e9853ae6b075039a50f0051f084ab13ab92e192f44ecf699d8e17cb584d637ffb9","size":56142,"data":"","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-07-25T12:58:28.739379Z","times_seen":20181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/unite/encforms.js?ver=1761119296","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2d77387c0dedc78ae85a7ab52aad886","sha1":"0d8ee19645e8246409f76adee4412ecef3466b76","sha256":"2af6b51b39ceab86129d473a1fb9a4a827539efc7452de2103a84ebd09d75790","sha512":"d922ced4a418ef9049cebadaf49f897432449ad051ece1361014ca9c64514f9eb53f6d77d6e83551ed2939d0eab9d518f0c048e12aef3e167ef3d1d517dbe3ca","ssdeep":"192:gxlzcp1ISvp1S/yakFAn1hQu66H1Ka1t4l/O3a6Nr:zb6cu6IQM","tlshash":"9f32209871bb1870993338344bbf8512793ac11f4c5cd954bdac2aa07f58a5ec6e1bb4","size":11858,"data":"","first_seen":"2025-10-22T08:39:12.013749Z","last_seen":"2026-07-25T02:29:56.445614Z","times_seen":1506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/js/www/decrypt.js","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d1d23f897c7f9fa4b24eeb8159d7e21","sha1":"9c6ab5fed65abe81454978f1e844c4f36d61a1c7","sha256":"8da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869","sha512":"4d258cf5b37b503615a1373aebf3474ec8f94351455729665223a9318067ca6b815d0bf3c265ead937660bfb3b0e75b25f450ef1b235a64b32d87df01e1b8e32","ssdeep":"","tlshash":"b9f0bec8adaffdd4add295d2627ec809a99315430209df52b688ac1c9fc80281a2b0f1","size":531,"data":"","first_seen":"2023-12-21T07:44:20Z","last_seen":"2026-07-25T02:29:56.42339Z","times_seen":4755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc73d35f5cc1806a1d4a4644579104c0","sha1":"2ba6e2a59a23ee43c16b4bd9e5cdc8e05646fb0b","sha256":"4053ddd607d4daccffea0d1a7b56e10018cc56096937fe55dc2e7a8142c210aa","sha512":"52af5976ddffb9116c526808dcd9dd73609939a5b5d0763ff406d86a2d8f02cc5563465532949aef08c1f3f1dc96f6eb477e3e68ce68566010eb692f665671d7","ssdeep":"","tlshash":"53b012ec7b539243248d13f2ec3ac9358c39317d1371379321bc204d0c154085410100","size":106,"data":"","first_seen":"2023-03-07T15:03:59Z","last_seen":"2026-05-30T10:19:54.535688Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"221050bf7714bc65f6d736945a5b71d0","sha1":"ee58d6e2858300c2ca78ccfb95ff27561e220187","sha256":"305c0ae9e761ac6619a85be15d81ceb01284891d195f6dbeb9ee327bf07b09e9","sha512":"e87f325fb96160d41c77a97c48c19482e08872c7d74a072cf5c9826e6d7215544614c62c6a98b60f1ee03c5ab5c5edf244fbdd83d0ff663d3f2658960f1d3def","ssdeep":"","tlshash":"3621c21bec5b54a03757043913fbc44cb1a2994fe069c405b48de8514f54e860d2eb9c","size":1376,"data":"","first_seen":"2025-10-27T17:15:51.497142Z","last_seen":"2026-02-04T23:57:24.552176Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/main.js?ver=1598008226","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a579f2e4d3b31b3ea017e7b03a475dd","sha1":"8d9a6430face051ae1365d421f15c60cff36613c","sha256":"ca0d1288490dab47eb98606d7e519b4be96e1d5f354b8cf4a6ef39dd1846c41c","sha512":"e5c65863509fb786d1a2ac8a1c0e0ec1446158037079a067eb6976040a0d912e326c2254e7968a7e22ae794d3adad6b9bfccbd2a4eb35dad622676d3a989d742","ssdeep":"","tlshash":"1941cc1df9f665c208b730164f3f451c2163a81f6a09ce40395c65c09fa267ed2dbeba","size":1933,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.408998Z","times_seen":5056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6b43d3cec4128bc1a7fe52174d7209d","sha1":"c396d15b0d0ca032d7e31f892ae8ce78fb5ca5d8","sha256":"c7df1b83cdf6eda00bd4f179e192516ef36cb9b5f74673c5a6c9434538c05929","sha512":"7a6b846ac758c4b51276041820aca4e9db051e4c910bacc135558b0fc06ab6ec72f5f250b93f1585ad501b984148b1ea354d4a5b56156ba30a5f6c7e325e0247","ssdeep":"","tlshash":"be218c3bc79a1386598b403a2ad68a0571a818e3ff189c107a4ed3111f8a90a217de64","size":1271,"data":"","first_seen":"2025-10-27T17:15:51.489177Z","last_seen":"2026-02-04T23:57:24.555583Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/plus/plugin/js/bootstrap.min.js?ver=1598106537","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-25T16:53:04.14779Z","times_seen":96472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b52461ffa9d2933805aaac8da07ed157","sha1":"9777a526511029c8f342b55a77c535d3b3969d2e","sha256":"892bff057e27c977eabee8a05339ca1c4b0554f968e99788040570b55bdfa691","sha512":"f8b4ed733486a64fea4dfc94c759288b5ab23212bf12f3953402a220f17b4d7fdcb8c68f50deb8ce9b7b18458d1261b8fde5dd63399e4904d40e8fb8908963a7","ssdeep":"","tlshash":"3d513839e7b23250d8b7b23b2baf935829918043c50dc9123f4e76b40f1041f3d446d8","size":2867,"data":"","first_seen":"2025-10-27T17:15:51.484557Z","last_seen":"2026-02-04T23:57:24.554981Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/moment-timezone.js?ver=1580697220","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc45c47c99fe4d26b2b24e46cec399ad","sha1":"221067a4147ece74b03934528ad61bcd4026e477","sha256":"4a65c2af68e89944c3da128c9b329596d930ce09dc9b8ba726b640d812e1fd88","sha512":"1658e474170022d40e698a422f024b4872bff33c78af1dbe98df3a6a99a0f1cd1eb36725ac9fca7bc1264ea491d0a19a2ee0a3a952adba4aba3242c06f830f93","ssdeep":"3072:olpkvlaDD/DCD/DCD2iqWCPrMBq1rGPuAZDDD1DDWoST+piMhrlon5Blu4hK:CkbW0sNpiMx","tlshash":"f714b0292617bb44e459c08bfa3779c0caade18a940614d25f7d57b31fa37e2de68c03","size":196335,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.393971Z","times_seen":5062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8621397ab2018ac7b369c68e6a7c506a","sha1":"cc4821321b58ccc9e4248bcb50d04dca95e85cee","sha256":"97dc52fc1734692d7b6e3ce54b86bd0befe034293a5149a2d9622e6636b6c2a9","sha512":"70f2418fd3cd639e2d29e4ad554874ac60ba7c321839d88625bafa7ddfde7a1af91a395c399ae5db100eb149830e06b87e96a120e3406dfa507a91e10a16c1b1","ssdeep":"3072:lcNoouchCEPHhoysGVEJU4HJ7nq+g7097BALRs1fGmD:lc+cl/2ysGVEakFe70HAW1f3D","tlshash":"bad312605ab3dab1762501347acebf6c928ba9cec10c3af77f0973d5960bd4f9261061","size":135935,"data":"","first_seen":"2026-01-15T01:32:44.597979Z","last_seen":"2026-01-15T01:32:44.597979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dbfac604589a1741f9d029471b1840f","sha1":"0f7c031c2ef7f93c9328ae8d5b0ace99ee22ae8d","sha256":"a63559d2a32192c009134c65a6c8a33e4652945e1613cc9805d878835e4c38bf","sha512":"d135bfa591ebf617335226d3bcf06f9ab36f5211c12a06b404af61a1767fb01ae51dd15ec07a1b251a370e27bd0067698ceec15c895c204bd4e864e3035a3106","ssdeep":"","tlshash":"4f31260bcd0a22a3556284701a193268319004e3cf0034453f6e82181f4f20f21f25cf","size":1673,"data":"","first_seen":"2025-10-27T17:15:51.483401Z","last_seen":"2026-02-04T23:57:24.558595Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/unite/share_unite.js?ver=1749181409","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c6288b67f7750a75b6e9abbf74c8a4","sha1":"5f464f4ce28448acc1c2fe825d4218795b023db4","sha256":"20327edf72e6632c450e8f8e443db2f728361f74b68697932491108c7f483b9e","sha512":"39dac004bb9b904ec4c4bb4d4963c3b8c4c9d98f9a80d90e53134e28c6055831652f0911e59b58f54c4b1e7156d8aba181b90ee3fe0ba6aefb67162b990787c0","ssdeep":"","tlshash":"37513127e6b82006207730a7deee346b556a8426b3417f06b7bc01a54fc58ac7f9270c","size":2667,"data":"","first_seen":"2025-06-07T06:32:46.623015Z","last_seen":"2026-07-25T02:29:56.404775Z","times_seen":4086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"06f2b49b56e6efcaf64bba6a92eba4e1","sha1":"917a67df953dd2d2065e669d77fec4648e5d821b","sha256":"15793eec4f9e05a28e800104abede54649ffff8dbd2c16bbe7f6e81e155e82b8","sha512":"ec76c8a68c4f765161525d3da1a91956f6392ad13baa2c45d6238cb807adc274044a8385f26b0a66b56df318bc1af452fac0098dad16f5a976a0b0c87b5872cf","ssdeep":"","tlshash":"4a311297d16c5c5d45cb9670342518a5330ebcb3fa028ae2e23fc76832b3d49c553d6a","size":1528,"data":"","first_seen":"2025-07-31T04:29:11.983216Z","last_seen":"2026-05-02T03:51:45.664772Z","times_seen":1580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5af2e2ac11ee48ff039742b22d85d081","sha1":"1d64b4904ef5ee93c48729f58d6a9901dbec0ba3","sha256":"a77f343c9d1d33ce57db9966d828b85fc064ba6193d3c941d470d93d3d79e61b","sha512":"9f343e7a003c2c117d67e47296457f3e1156e43b3b789f4a4bc60b14c38771c853f1aa2bbdf047ffa5cf4f8b5c8753549f8250d7498f6eed1681511ae42aafba","ssdeep":"","tlshash":"e9319a1cde1a484229e1cbb80481164226985583ddb0fa2fbb9c96806f6e02f97f26dd","size":1479,"data":"","first_seen":"2025-10-27T17:15:51.485682Z","last_seen":"2026-02-04T23:57:24.549694Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/checkinput.js?ver=1598008226","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1701a1c0e116f99b046f95c9f2f4ef5a","sha1":"c0ea303e6c96847ed6bb4c72afd3a84332ab5b3a","sha256":"5a053d48644953a4dbc5f0cb73d4723dd958c9b5574be9cdaac4bccf21d9f38b","sha512":"131b0b96f085bbabf04eac826013f7a62402bfe7e8aa4f6830ac9bdd4d629e4062a687b03a14d6c02d8ea741aea17fe4646da4c054c1954454025fa22f0fd307","ssdeep":"96:ZRORCQC5WCPCD9CQCwCGCkCmCQC+MiCwCdCuuCkCbmCd9P/ddPojcHoujp1SPZaQ:ZRRRvJdlANu91diXdT59j6IQNHYerS","tlshash":"9d62204de0983ea6857333750e7f5200f57906278525eb08be9c59b42fbe80a4b63f5a","size":15360,"data":"","first_seen":"2023-04-15T09:13:23Z","last_seen":"2026-07-25T02:29:56.410916Z","times_seen":5057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/moment.js?ver=1580697220","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e70edb526ff09f426618efade93a4782","sha1":"840b05449d3851118fc835592bd98af885bdbf1f","sha256":"ab513aa4626ba224ac61b747674e6aead965f6e2cf87a2e60c7d4645b519817f","sha512":"943192c03e09b13bbdee324fda4c81d019b4cb5178596b5c548a1e6776022aded289a6076d32d5f55f99316b57b6f7db13c6429edb3a1e6927e7bcea89774cd9","ssdeep":"1536:/cZlnfxbjbJzvdvpeG2iMuz/M6z4QZFSNwmJaxxKZ5dFR79LNOf0uK:/cZlntbEG2i8umYx620uK","tlshash":"cfc3508a69476123467267398f9f4509ff6985330a0e8605bc9d92d83f71c6c43bafec","size":127757,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.419416Z","times_seen":5116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0e9e399ee49ba88a736080e9b685719","sha1":"f062f01ca094ff37a8e3ac7cc5170f3fcf1b7407","sha256":"8ff7632f528e8f6530d34cc069efa46e2d274f9ff986f62ccd52935a7391c2a4","sha512":"2b33df4f73c8dcb8f355fd199e78439edf8b1e26da82bf7bc3e2603974890a78e5b6e40ea7e647910544a28f75fcdc0a3ffdc657b747bf7160b7b59d433bc081","ssdeep":"","tlshash":"8421924acd31212499de663846b632eb351154a3cf0aa8a93b8d9310af4881f20382ee","size":1187,"data":"","first_seen":"2025-10-27T17:15:51.511874Z","last_seen":"2026-02-04T23:57:24.53705Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4696c72920c4739d95e02b8831a1f5b8","sha1":"3c46ce93f1fe4abbdea774be0e977269fb7c9267","sha256":"072d066d65868c6cc12851375eef590a32b2c1980ebe545d0ae967c0a23c1523","sha512":"ddcd10fad84b3c9e1c17354b023a20e70f818f6133f76d29816dff35a6559f50933676e02aa582d0c57966376dcfbaf59d0060eaa269e38231a89446ff90fcb1","ssdeep":"","tlshash":"4a41230cf24fb40ba03e807c80a66e2fcabd0b84d0bd5f4d4222b001ef50d143598af8","size":1995,"data":"","first_seen":"2026-01-15T01:32:44.602022Z","last_seen":"2026-01-15T01:32:44.602022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b9c2f6a1c35555bd1b7d5b1f0589ce8","sha1":"76f01af61df5639a10e06ecfca317f66d06383b1","sha256":"d12478076d55eaa6fbc6ca7a226f82d62239185fd65782c93db149d69b6259fe","sha512":"a4651d777e72f12942efb509e6ad474842eb22e3d12a5fb9fda35984f3877f99d89d92f3013f1fcef57e7bb1236a5a1bfd1c159e891115e025002ffc8e316d57","ssdeep":"","tlshash":"1941e59ff0f9022106f774324e7b5104392650abe447ab0036cc56406f68a2f8ae9e9a","size":1954,"data":"","first_seen":"2025-10-27T17:15:51.50925Z","last_seen":"2026-05-16T11:25:10.588972Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/login.js?ver=1597629260","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"24bc8669caf172f2c17a06fcd73ae539","sha1":"3bad8f340bca43d8fb98c3ca39def12f816769a8","sha256":"29df48677fd1c2b2a602c35faeadd3693f083b78550b2c0f3108f356c34b74bd","sha512":"0b4b2dc35f8b97238079334be832751d1e33dfbbddda4961c38127afadcb088101bad71b0442bd810930df2658dfd9f42da0b08d44bb1e1f1dd0a5dde33423a3","ssdeep":"","tlshash":"f3c02240b13f377c587372a0803a0506df73701c1c0056e0b0b842a02c187040813c78","size":191,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.416995Z","times_seen":5059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"76e2339b1e23011767ab522e870d3905","sha1":"005a4a55ed2ea6e8fb1388aafb34fb17cf808877","sha256":"b3fbfc6f4b89714dc1c4a96c84d22024d8b9ab82ae179304d6b099b08229ed0b","sha512":"b7433713491ef85594b2f3cf4573e7977aaaf8f824b5b5bed5238811f5a62c0d19d43b11af6cce189e8ca6d6a83a2aa5f842bebdb2f782e58f57c2a3bb4521b0","ssdeep":"","tlshash":"5731ed8cc526001420091339b88938022a455e8bde98342e339e1e7e2feb80e4ae369e","size":1745,"data":"","first_seen":"2025-10-27T17:15:51.482239Z","last_seen":"2026-02-04T23:57:24.544006Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/swiper.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","size":114405,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.434546Z","times_seen":5157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/swiper.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","size":114405,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.434546Z","times_seen":5157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/jquery.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84345,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-25T07:20:02.685262Z","times_seen":26154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-25T16:27:19.297845Z","times_seen":22830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"17c3d2f27dfc340f052883906cc5b2c4","sha1":"d46fddcefd69e3325386b10fb3c5c8d6d20e04ca","sha256":"5848fa4c2fb007cc231cbf8049fa4905f7c9a6e4cedbac4e6cf41d80df78c29b","sha512":"026f4f89dfb4d41c17b72c3a2932bace74c57ca4a22893b163286e802965521965b70e513f7a2d3bcf0a7953a4bc5dbd14eb0f39eaf52f4576f4d143369312e1","ssdeep":"","tlshash":"83416624faa16049443728bf2f1f1a0c361ac643da27dc007a0c6e84cfa80a95a3f7d8","size":2387,"data":"","first_seen":"2025-10-27T17:15:51.490528Z","last_seen":"2026-02-04T23:57:24.545475Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"11a30c8fbc44a992387825c4f8ddeb65","sha1":"a053336e3a472a00bcdeed78b16407ad70a6a33e","sha256":"e3e98d3205cdd383a3084826389a7e3e3b6bbfb29ce86feeaed29ce8736b9a10","sha512":"cd67e8e408d9cecafafec20da32fbabbdebec94551806b6c2876753dd6566cc53d1a10d66cce3767b574a74d41de2b39bbf2ac188239b874f933460569908e34","ssdeep":"","tlshash":"00417bc5fab153a0593b14b66cbf510a6d127407fe0bf52af14c56d05f2841c31b9989","size":2335,"data":"","first_seen":"2025-05-01T12:50:14.350824Z","last_seen":"2026-05-16T11:25:10.592035Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2fc002cf3bb03c6e829280714147677","sha1":"5c2ef244f20062e1011935cf6a6bc94a14da7920","sha256":"c955ab92c6352dfad6638fc3a111f3b7d7af49e2dd5138ed73112504b0f54caf","sha512":"cbbbceb0ad8f21c3369e4371f660f0c19751b312c9f6d2b29408d304e2ccc900725a7276b642238e84f4a0de83618921613e3666b2b1a3ad62f4ff958f794ba3","ssdeep":"","tlshash":"d241cd15d6b646042937707054ff56d43f16e423eb018915315cd5c05f68e35d93d55d","size":1962,"data":"","first_seen":"2025-05-01T12:50:14.376858Z","last_seen":"2026-05-16T11:25:10.593213Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"57d2df6a152f64078c6049fb741e53fc","sha1":"906207d9a1b5b4ee45fe76aa5792a7a4b8c1499c","sha256":"31f4cc00cf71539a1c1eb3bbe993d75a8abcde27522a7ffef196f5409bcd6344","sha512":"bf5d3f41f89c64aff7481f911d41bf46a3c312aad2e7b4ac2206e6324d61cd9839736b9b2f1b7047dfe3443030642e2be4a237801b0ad598b31637f3b3880e7a","ssdeep":"","tlshash":"69417bc5fab153a0593b14b66cbf510a6d127407fe0bf52af14c56d05f2841c31b9989","size":2433,"data":"","first_seen":"2025-05-01T12:50:14.385026Z","last_seen":"2026-07-25T02:29:56.474495Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"43a4fe853bd26b7fad449c7505cee606","sha1":"21cb3e33180e51e903f010e7d72f7218d43b3eec","sha256":"80459209f6025d321794c93cba4eaa095f950d2e56326638162eadba70e6f82a","sha512":"2bfc994b5d043faa4cdd12be54e0ab7b401c835bf4320a985936033dca03dbe31395e4bb1c521bc4066eb2343f63d335ad090841100ff36fe0e635e2efeb0acd","ssdeep":"","tlshash":"35517bc5fab153a0593b14b66cbf510a6d127407fe0bf52af14c56d05f2841c31b9989","size":2475,"data":"","first_seen":"2025-06-19T11:20:56.279012Z","last_seen":"2026-02-04T23:57:24.546912Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/jquery-migrate.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-25T16:24:40.365248Z","times_seen":24728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"68049934867e0da675324d1e2b782e8b","sha1":"7b31e2b1db46b9da08a2653cfac048dc99611101","sha256":"d3dc2753353c9092f4f3d22b532ddb7d4e37ee1b05c928131c13f9c638556f82","sha512":"91cea74cd106d26255a79fa96e670c44f9475a0b3a27f325337731a188703328682293b13abf5059fb1c51a95f062975e9054165d9cdb3a232933014b4d4574c","ssdeep":"384:l+AWrUQNxPsT6JxNvYNw77JAhT2jeEWJ2yXw:l+AWrUQNxP9JxNvYNwi8jeEWJbg","tlshash":"bb03309055fa106b5572d1e23eb12f2faf94f453e50aca0476fc2fc88fd6d86a423099","size":39890,"data":"","first_seen":"2026-01-15T01:32:44.608545Z","last_seen":"2026-01-15T01:32:44.608545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/740.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/740.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-516a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 20842\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"d47ee4982e8749c7ef437498c4a96fd1","sha1":"8c46acfb731e0ff5332f93c958821365742247d4","sha256":"b5fc383afee873179ff9c9d2a13212506bd36b44f208d23b43fb3562130fd60c","sha512":"0a22239f92a0784dde78e200549b3dbacb3da6ce200994f0196cbc8cc43cbb7eabe4fea0c593ad68f4799dc0b1973380d59b2f8644a5b75e1dd5bdf32ade81e3","ssdeep":"384:huBqCWmRN46Hc7bkh0l0VveQshfrsGzORM1XMEKq9cpuyI/FU8+GY/uHO17uA5Be:hD1n2eImPhfrJORMJOqy7OU3s47v5Be","tlshash":"ec92d069e49d69074c878250542cdf32c8a836dc787e6fef7c5898980de2a18782ff85","first_seen":"2025-01-02T12:35:28.052367Z","last_seen":"2026-02-04T23:57:24.517928Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2275,"timings":{"blocked":1052,"dns":0,"connect":0,"send":0,"wait":1217,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/640.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/640.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-433b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17211\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"d4f17d6f927cc1ff0d41f5a6eb4b5717","sha1":"fc188ab239653b7b1539dd0e02abcee623652e66","sha256":"29ee4a1e4548b4c9c7b52cfa41a5f5818f846379fdca69a4edd3119e40d60a3e","sha512":"22619532005627430e35f695773f53ba1771642daab18a31dd904f4108364fabe5748c36d1678f37dcca2b7bfb386d58e309ba30e6e1aeb78bc31df680cc1f40","ssdeep":"384:vZyPhZ7WhDrSAlGOm8ilO89kWzt5GRLm+4khMHRe3kLLiEpt4:hyPhZ7WcAlXm7lz2458Sv4MsULLtpt4","tlshash":"7472e07348627cfa360df4da4457c2732ab11bbb2549cb51d2fa13be608e01d6ba2620","first_seen":"2025-01-02T12:35:28.055918Z","last_seen":"2026-02-04T23:57:24.53071Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2270,"timings":{"blocked":1049,"dns":0,"connect":0,"send":0,"wait":1217,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8300.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8300.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-44ed\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17645\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17645,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"5d32aa9ea6c80c5c6192253b32e7939f","sha1":"f0e3d27034a34416692e9d5585c4d08fcc34e078","sha256":"c5b23fb8f520675540e85ded2e1ab420d943ffc03bf0414a78e3f9186dbf4acb","sha512":"6977e1196110a021c8a774fb3f92e7453553d1f1d82dec2b36b8811bc1affea40a589d4300ad961de2abdd877116ceec5c045f0b1d5f029046b2e9ce21c0136b","ssdeep":"384:6hIp7Hzd+ls2AVU3+gQAqNHUeI+C5X9xlY7j41P9+:6hIp7HEls2A4fQXU1X9xlY7jIPE","tlshash":"c582d0255e4df27943040062913de079f351e6937952aa2be8b6cc334b1f91b38f85e3","first_seen":"2025-01-02T12:35:28.069119Z","last_seen":"2026-02-04T23:57:24.480602Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2257,"timings":{"blocked":1041,"dns":0,"connect":0,"send":0,"wait":1017,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/custom/login_custom.css?ver=1663905027","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/custom/login_custom.css?ver=1663905027 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 105\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: \"632d2d03-69\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 92\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d520ae5e8e22ca748c7a9f42456b2999","sha1":"bc32a4581b85bbba126872bed2d05be6e8db1c96","sha256":"2ef18a39610b5f98818cd76249061e93a4bc8c01677b51d73ea80fd3b1519865","sha512":"2a6bd8693789250119a0a9fb8d109eea7ff436ac974ea547b5ae7282d4e6450f2c1fc7c076486395d056ad7cc775f3ff5cbf1cc08ce718e7f5e2a58e0ce90ad8","ssdeep":"","tlshash":"1db092900c5a4f238407c595689a87018e3d90219f888f2f0c3928a4ca8af1410a6670","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.441969Z","times_seen":5048,"resource_available":false,"data":null}},"time_used":1530,"timings":{"blocked":1120,"dns":0,"connect":0,"send":0,"wait":405,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/unite/encforms.js?ver=1761119296","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/js/unite/encforms.js?ver=1761119296 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"68f88c40-2e52\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 11858\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d2d77387c0dedc78ae85a7ab52aad886","sha1":"0d8ee19645e8246409f76adee4412ecef3466b76","sha256":"2af6b51b39ceab86129d473a1fb9a4a827539efc7452de2103a84ebd09d75790","sha512":"d922ced4a418ef9049cebadaf49f897432449ad051ece1361014ca9c64514f9eb53f6d77d6e83551ed2939d0eab9d518f0c048e12aef3e167ef3d1d517dbe3ca","ssdeep":"192:gxlzcp1ISvp1S/yakFAn1hQu66H1Ka1t4l/O3a6Nr:zb6cu6IQM","tlshash":"9f32209871bb1870993338344bbf8512793ac11f4c5cd954bdac2aa07f58a5ec6e1bb4","first_seen":"2025-10-22T08:39:12.013749Z","last_seen":"2026-07-25T02:29:56.445614Z","times_seen":1506,"resource_available":true,"data":null}},"time_used":1607,"timings":{"blocked":1002,"dns":0,"connect":0,"send":0,"wait":404,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images/dc_hot.gif?ver=1597629314","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images/dc_hot.gif?ver=1597629314 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/gif\r\ndate: Thu, 15 Jan 2026 00:19:12 GMT\r\netag: \"5f39e382-56c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:12 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1388,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 21 x 12","md5":"e5f49d4212fec35b11b76cd616e1f8ec","sha1":"0697a3b11f5d0906b2d1cf59051b46ee3b5dc72a","sha256":"c34ed994680ca6446b85dd47aa963cd4cfdd07180a9517b4d7d37f3c7a1b94cd","sha512":"a7057e7e9cd4fec2ca911ac507ce7161412f8813453ceb3f2a1d28380fdaadf1e8d5119eae83f92ae001ca7f8a2cf0f0c0369a8ef2af4d751b6a08053c3efc94","ssdeep":"","tlshash":"3421660eed42b841944c68da3effc81f5651448089e4f4cbb49e6d1b5e1507e54668eb","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-18T11:56:42.032387Z","times_seen":5154,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/member/call-request?check=1","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet83091.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 17:39:21 GMT","end":"Mon, 16 Feb 2026 17:39:20 GMT"},"fingerprint":{"sha1":"11:CC:96:86:39:6F:13:F3:65:B5:6A:F3:CC:2D:C3:20:45:E6:62:CE","sha256":"8E:00:8F:23:F5:A1:E2:26:C7:79:F2:F7:22:D3:CD:F4:DC:31:5B:E6:DD:D9:26:DE:B4:43:F2:45:61:AC:50:9B"}}},"request":{"raw":"GET /member/call-request?check=1 HTTP/1.1\r\nHost: bet83091.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/poker/186\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1PTUhuTUpLOWc1WkN3MmVMNEVRNHc9PSIsInZhbHVlIjoiUm95eTVNYkV4aHVHNXBja3FWblZZRklUY0FnbHBZVHFJUVd3M0RyMElWa1ZBcnJYR0V1OThYclpKOVBvYThoSXlpd0M5d2l1OTEzU2MxU3hvbEZSMFE9PSIsIm1hYyI6IjM3YjhjNWUyMzYxMzc2YTU2Y2JkMTU2MmNkZmI4YTJmZDI1ZGUyYjFhMmExYmFmOTk3OWM3MzkyZGQ2Y2MyZTcifQ%3D%3D; vanguard_session=eyJpdiI6Ingwb1Nvc2VKMTg3eU5lbFhcL0pmdmN3PT0iLCJ2YWx1ZSI6IlNGd2dWQkZVanFKRFNuZHlcLzRaTk9tU3o3UmdsaXcwUEthQml4blpEbXl4dVZcL1pDZTM1WUk0NjVOYTNINGIrdmxXTDdDTUN5d1BzUkY0bFk4NStOWWc9PSIsIm1hYyI6Ijg5M2I5ZmJjYTkwOWJhZjY5OGUwNjNiNTk2NTc3YzdmODA4N2U1NGViODBjMWYzZGRlNzM3OGMzYzhlYWVmMTcifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 15 Jan 2026 01:32:21 GMT\r\nContent-Type: application/json\r\nContent-Length: 40\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: no-cache, private\r\nSet-Cookie: vanguard_session=eyJpdiI6InZqeVQxOU1GemNONVRJZHVXMG9JVWc9PSIsInZhbHVlIjoiTUkzSEgyRDJQR0hJOWI1SzI5dUlJbEY3S1NvM1VWSEI0TmhGZFwvMGRuK0NCMktmMmI3Q20xRE1GV0tYdmwzSXB4OHNWQzdIbnMwUzI1NEhOenBCZXB3PT0iLCJtYWMiOiJhZGMxNTYwYTQ0MWFlMmUwYWRlMGE1NmRkMDZmNmRkYjlhOTg4MjVkOTVmYWFlMjA5NWZkNDUyZmQ2MTdmYzY3In0%3D; expires=Thu, 15-Jan-2026 03:32:21 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nX-Bos: b83\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"27a5688b27ae3688ca0183ce926be3c8","sha1":"fa4dec3b6af6674afd7b14710cac41b15ae75b29","sha256":"4359a477fc8cc8212517f5a190d4aa0a7cd1c85509d56d2a6a8efef408420ad7","sha512":"d73bb567a0b0280d42dda28c8e97725e96529072bd78d0844786e008d9ce3f89c7c3399eea85342be65d7b440d6023094b9f2f5d624e7dde0a46fbfb1484bc85","ssdeep":"","tlshash":"e19004cc7747575c040c40c54d44004453744d005c500c04445c11c534401570750401","first_seen":"2023-04-15T09:13:24Z","last_seen":"2026-07-25T02:29:56.41029Z","times_seen":4894,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-15","alert":"Phishing Block","trigger":"bet83091.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/common/bet365_style.css?ver=1685497875","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/common/bet365_style.css?ver=1685497875 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: W/\"6476a813-3db7\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15799,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"63d91c124b45be43dfba690f9045f34b","sha1":"e387df588d63853316200db1994fb05f2971dcdd","sha256":"f2f6ae08f73e63fa21a560b88fdeb49afc9dc7386c6db1bfb317904a3dc3bf85","sha512":"b7c973f6d4ef57c03d0ed0f2d27d87a29fa9bca34222d3fc0486f23739c871cfe2f313d9d8cf6255d07cd8a9812cf45aaa1a49e4cd2253434e3c1517a3bdae76","ssdeep":"192:kI/btVaRFgGntC76JlL/mt8ZM2Qpdr/0CCsafFUsOA8mxiqfFK4PNlQVOwGWNOn9:cF3LmaFU0FKfIXLAG","tlshash":"716262f69b671c45b926c1a9af68a7c133695213c00dc92d7fd4721c8fce5e898e238d","first_seen":"2025-04-11T10:47:55.702437Z","last_seen":"2026-07-25T02:29:56.431691Z","times_seen":2891,"resource_available":false,"data":null}},"time_used":3297,"timings":{"blocked":1253,"dns":604,"connect":205,"send":0,"wait":777,"receive":0,"ssl":452},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/footer/footer-thwate.png?ver=1600719130","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/footer/footer-thwate.png?ver=1600719130 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:19:11 GMT\r\netag: \"5f69091a-329\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:11 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 809\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 32, 4-bit colormap, non-interlaced","md5":"997ba7f2d6da9a90f5517d426b5994e9","sha1":"61bdecfa266e48f6f0dc9469f598a45c7bff9036","sha256":"146c3bcd19eef83c9a698efae1d39cdbbf4a948f75b7677931654dffb89ae5f5","sha512":"673b28fdc116da7e830f7fdcab47496a72c13317065e4e4a934a86c89c939287f902f9dd225c78eb7c36a5859ba6fed717423078dc71dda886aaff9de2dcfad6","ssdeep":"","tlshash":"6d018669437c54668d94d3b0633cec11c5a7a3831878b353960380c9ef58a0260c618b","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-07-25T02:29:56.438696Z","times_seen":3291,"resource_available":false,"data":null}},"time_used":1834,"timings":{"blocked":1026,"dns":0,"connect":0,"send":0,"wait":806,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/footer/footer-gamcare.png?ver=1600719130","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/footer/footer-gamcare.png?ver=1600719130 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:19:11 GMT\r\netag: \"5f69091a-17b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:11 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 379\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 29, 4-bit colormap, non-interlaced","md5":"fed68f2bda8fcbde677d6243c0da867c","sha1":"19f6e8a0721b068651f3d893db375a0d2c44646c","sha256":"f1dd1841440203f7d5894ce378a49f8d33d02f6ba5896de0b885f1b9810d870c","sha512":"ed62b58cd01bdf562995311bdb2e6232bf8ace2b16c633c93b498d7236db5f326867323e2b9556afaff476d1253a276fa22aacefd0d8c04deb48dd648c20f932","ssdeep":"","tlshash":"89e0c0e03234ccbc094b1b6215d4f011d0278b6f38568c2b788e81b0ec101c1e55a747","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-03-19T07:12:22.986685Z","times_seen":3270,"resource_available":false,"data":null}},"time_used":1832,"timings":{"blocked":1025,"dns":0,"connect":0,"send":0,"wait":805,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/jquery-migrate.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/js/jquery-migrate.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"5f412ba9-1c1f\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 7199\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-25T16:24:40.365248Z","times_seen":24728,"resource_available":true,"data":null}},"time_used":2450,"timings":{"blocked":1010,"dns":0,"connect":0,"send":0,"wait":408,"receive":1032,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/assets/js/caller.js?ver=1675418258","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /assets/js/caller.js?ver=1675418258 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"63dcda92-1122\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 4386\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4386,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4e7441dc033395b76a96b25b6efef0f0","sha1":"c833e33f4a95efa559a847dfff036cb904260b48","sha256":"80caabbe50f5f83254e2545d01bacf299c7f417a103e912bd41d6c330a6e4f86","sha512":"e96041ac2b7106fe9aceddc1faa3e996ffaa97945d56cff7b3ca0697492cf6ff53f6fc3826319a85eb360e684a166c0c8c075118a37655312dfbf231ff9aa167","ssdeep":"96:veR5suijTWxKhgCBTSCkAjnhefPMm03OMu9eqeeV0vMu9eqeeVqgYi:veR5su+TWsU1eO70v76i","tlshash":"dc914212de042051f76332b85a55661f6131684f7f8a888dbcbc747f9b70acb857d189","first_seen":"2023-03-13T18:11:33Z","last_seen":"2026-07-25T02:29:56.41883Z","times_seen":5054,"resource_available":true,"data":null}},"time_used":2421,"timings":{"blocked":1001,"dns":0,"connect":0,"send":0,"wait":404,"receive":1016,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/plus/plugin/css/to_bootstrap.css?ver=1598106537","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet83091.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 17:39:21 GMT","end":"Mon, 16 Feb 2026 17:39:20 GMT"},"fingerprint":{"sha1":"11:CC:96:86:39:6F:13:F3:65:B5:6A:F3:CC:2D:C3:20:45:E6:62:CE","sha256":"8E:00:8F:23:F5:A1:E2:26:C7:79:F2:F7:22:D3:CD:F4:DC:31:5B:E6:DD:D9:26:DE:B4:43:F2:45:61:AC:50:9B"}}},"request":{"raw":"GET /plus/plugin/css/to_bootstrap.css?ver=1598106537 HTTP/1.1\r\nHost: bet83091.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/poker/186\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilk3MEY0OWt1TEN0dXh6U2ZcL0FcL2YxUT09IiwidmFsdWUiOiJCNEY3YTNlalJqd3NDb0lHdDBNUUptUXNGVlBUNUtcL2RET1NUbjMySEsrWURoSXk5T3hMQml6N25NOGM3XC9pVUtSQmI4WExpWmtBejZYUUxnaERiXC8wUT09IiwibWFjIjoiNGIzZGM2NzhhYzg3NWViN2UxZTYzMGNjOTQ5ZDdhMTFmOTA0Y2I3NmRmYjdlZmVlZDZhZDc0ZWIzOWU3MTU1NSJ9; vanguard_session=eyJpdiI6Ijl0aEhEMDhhMG9qelwvWWhuaVNhYkZRPT0iLCJ2YWx1ZSI6IjRvdWJLTzJzeFR4djlWV0psNHMxaW5tNmhmWEZKQmYzWHpRcWZocWhlSEp4aEpnR2tqZDYxZFJGWlUwVENPbFB1YnFTNVFPbjlUVnVLSWhtQmF6V1J3PT0iLCJtYWMiOiI2OWYwNjZiNjE4YTNiNTM3ZGNhNjQxODQ0NTIwNTA3MGMyOTVjY2JmM2QzZjc0ZTg2OGUzM2ZhYTRkOTc4ODZlIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 15 Jan 2026 01:32:17 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nETag: W/\"5f412ba9-2dc4a\"\r\nx-bos: b83\r\nContent-Encoding: gzip\r\nAlt-Svc: h3=\"b83.tuf3a353.com:443\";ma=604800;persist=1,h2=\"b83.tuf3a353.com:443\";ma=604800;persist=1\r\nX-Cache-Status: HIT\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187466,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (386), with CRLF line terminators","md5":"8778d79f7633526cee2d636c518d9d76","sha1":"b2e715b1c401220e8165353c60d1e3b3815cdb60","sha256":"de3c1a93b240cc733fec329f2272d3b640ffa5bb736ee5df966745c20aa71d32","sha512":"13eebee14a8f011114e3352939d8f0440dcfa3a28f3f0737126b661d669914ae97534f029fab80fa9d0bfa376ec68b86b86e2fc18b5aa844fd7b8cbe397e7eb8","ssdeep":"3072:v4rq/Ei8U6V3/k1UqQGQr79YiVk/UOiCYdf4Q4t1v1S38pWLgdXyLSJeFR+PfmgM:v4rq/Ei8U6V3/k1UqQGQr79YiVk/UOiP","tlshash":"a604a9989b003bc2a231867c736f4d01bf8881a195ea4d3db75f33785e679e66133e85","first_seen":"2023-04-15T09:13:24Z","last_seen":"2026-07-25T02:29:56.432795Z","times_seen":5038,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-15","alert":"Phishing Block","trigger":"bet83091.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/custom/float_customer.css?ver=1607755023","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/custom/float_customer.css?ver=1607755023 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 1259\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: \"5fd4650f-4eb\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 397\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2ddfef0c4056c3d9eb5f3df7fd940bdc","sha1":"5632067b6e1c0e2db3f7420470f8f5e15a78f2e8","sha256":"abb89644d467e88130629d409fe0c26f98779a78b539b6ff9996c720dfc8e662","sha512":"f989c4151853270e2ea25e60449305e0f9b0f5847a580e57b09908271d0d37f6b150515b3c49a343768b7cf4b34d42e858a9b30dbc3b7900747f40a5bd19e2f5","ssdeep":"","tlshash":"412195930d272904fc15e1742fc4112d122a80cfaa5fdc1c76d99f195fd266c98a6be0","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.43403Z","times_seen":3299,"resource_available":false,"data":null}},"time_used":1555,"timings":{"blocked":1150,"dns":0,"connect":0,"send":0,"wait":404,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/900.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/900.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-3e98\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 16024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"40d78e3edb7af07935c75b6ad83e6f61","sha1":"60f7566dfb7252222796d4aa598327925a05617d","sha256":"1c2f3994675a4832cc9984764707a6914ce332a846072eb197c83841b3fc1ae9","sha512":"f34091a73e55b9862e85570def8809f78a296c08761ca6a9a07be6abc72715811617154cbcfc935bff8f3c0afb134eabe9a78d33b3eeba0e102ab45eaddf1e63","ssdeep":"384:WqnVoE0ND4ZD2GCDRoXyrt7wP8KO4+YW4gvIiBT3+dSDm8o:pQNMV2GCDRuyrtGHON4gvIix+Wmj","tlshash":"eb72cf2366b64643fd93dd11c8cb47c76962930b8c634a1a7239b38ca3cd2ecd9a5760","first_seen":"2025-01-02T12:35:28.034766Z","last_seen":"2026-02-04T23:57:24.477439Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2289,"timings":{"blocked":1062,"dns":0,"connect":0,"send":0,"wait":1221,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/swiper.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/js/swiper.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"5f412ba9-1bee5\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 114405\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114405,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271)","md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.434546Z","times_seen":5157,"resource_available":true,"data":null}},"time_used":2459,"timings":{"blocked":1012,"dns":0,"connect":0,"send":0,"wait":407,"receive":1040,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/plus/plugin/js/bootstrap.min.js?ver=1598106537","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet83091.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 17:39:21 GMT","end":"Mon, 16 Feb 2026 17:39:20 GMT"},"fingerprint":{"sha1":"11:CC:96:86:39:6F:13:F3:65:B5:6A:F3:CC:2D:C3:20:45:E6:62:CE","sha256":"8E:00:8F:23:F5:A1:E2:26:C7:79:F2:F7:22:D3:CD:F4:DC:31:5B:E6:DD:D9:26:DE:B4:43:F2:45:61:AC:50:9B"}}},"request":{"raw":"GET /plus/plugin/js/bootstrap.min.js?ver=1598106537 HTTP/1.1\r\nHost: bet83091.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/poker/186\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilk3MEY0OWt1TEN0dXh6U2ZcL0FcL2YxUT09IiwidmFsdWUiOiJCNEY3YTNlalJqd3NDb0lHdDBNUUptUXNGVlBUNUtcL2RET1NUbjMySEsrWURoSXk5T3hMQml6N25NOGM3XC9pVUtSQmI4WExpWmtBejZYUUxnaERiXC8wUT09IiwibWFjIjoiNGIzZGM2NzhhYzg3NWViN2UxZTYzMGNjOTQ5ZDdhMTFmOTA0Y2I3NmRmYjdlZmVlZDZhZDc0ZWIzOWU3MTU1NSJ9; vanguard_session=eyJpdiI6Ijl0aEhEMDhhMG9qelwvWWhuaVNhYkZRPT0iLCJ2YWx1ZSI6IjRvdWJLTzJzeFR4djlWV0psNHMxaW5tNmhmWEZKQmYzWHpRcWZocWhlSEp4aEpnR2tqZDYxZFJGWlUwVENPbFB1YnFTNVFPbjlUVnVLSWhtQmF6V1J3PT0iLCJtYWMiOiI2OWYwNjZiNjE4YTNiNTM3ZGNhNjQxODQ0NTIwNTA3MGMyOTVjY2JmM2QzZjc0ZTg2OGUzM2ZhYTRkOTc4ODZlIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 15 Jan 2026 01:32:18 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nEtag: W/\"5f412ba9-90b5\"\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-25T16:53:04.14779Z","times_seen":96472,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-15","alert":"Phishing Block","trigger":"bet83091.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/unite/float_unite.css?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/unite/float_unite.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 725\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: \"5f412ba9-2d5\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 272\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":725,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"077a2c1ebe25590b50eae8ce89787e0c","sha1":"499751737e286bbc93a46a1d2d4aaa3e2163d336","sha256":"093a799f9422754f7e53dfcc8516d3753616de283a14553f37d58b3822fd1b3a","sha512":"390f32fe8e81d9a379c14e0552c198d5f83e650f085b1df623c45cfc1aa4076d2e220ef02a4ef6747c0cd597eeecc510a67933c26190cdc306b28ffc861c366a","ssdeep":"","tlshash":"080147d307230b40fc1ea3196fde835e142a00cb9c9ecc08366827689f4b62c9662ff4","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.445126Z","times_seen":5043,"resource_available":false,"data":null}},"time_used":1558,"timings":{"blocked":1154,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8100.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8100.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-48ee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 18670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"bf709d204f6bdfd1fc9e6327cfb8ed2a","sha1":"dab1156b7ac4ac3a4939070564a23c28ced0b4bd","sha256":"85ccd22f71259fb98f0abcc3baac70068185ec51a1ac9eb656579ac7cc8ba4f8","sha512":"4309def5a46e6293500ae3a55a091d55d10d01b5f4bc6de30282757067ab9d2c08b2b2ae2ee304751233e92495819db6c2aafe422602df3a63b854df8282e817","ssdeep":"384:swHjlrhggqLMchpGJb5zkLDTHrBJx3Ogh7LcbQzcVHsPnRO:BlhgNFEJVaTHrBJx+gh7SQzcVMPnw","tlshash":"6182d0f6014cbd94bd963f6a3bca1ee43827e9517775a779ab488e350805d82ac02fc1","first_seen":"2025-01-02T12:35:28.064928Z","last_seen":"2026-02-04T23:57:24.429653Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2256,"timings":{"blocked":1043,"dns":0,"connect":0,"send":0,"wait":1018,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8240.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8240.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4d6b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 19819\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"827e8d9eac96cbf604a59bf7f1dc113c","sha1":"85384e2acc52491b5f5b01d3271e5b94907adf69","sha256":"7eafbf361e4ed2498594e01d2e6c4248f49bea6099cec077e42679b8e5cc6a91","sha512":"6247aa4be8dc062a29eed69e99fb8190c02a1ac90c3e39a3eeb24987e1d1a1ce8205e5c2589c431f2dca5f4674142d601074be0365f62812034bf18541be4b5b","ssdeep":"384:YbYVK8rPSEDNu4V57a4ZKylS1glnUEE9FC3bSvqDCRMEeo5wUOCqx6Mr7SaV:uYVK8rKUl7aOrESW0VDCRMEVWjdx6MXD","tlshash":"2892c09473924ef4b47708ef6eab5ceb923e8601181ccf61e5d721f08d53098a445b4b","first_seen":"2025-01-02T12:35:28.074695Z","last_seen":"2026-02-04T23:57:24.441957Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2056,"timings":{"blocked":1038,"dns":0,"connect":0,"send":0,"wait":1011,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8250.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8250.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4bd7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 19415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"b2753324cb27167087ae3801e12c37e7","sha1":"871879609e8924e2506692b7462bcff3252a4f9d","sha256":"ca1c5396c14497b2ce3ab75cd3a67b53a05a1835f70b9a99a6d5e6e445f048be","sha512":"cb561eed728b83bcfb12585a2b10d1662d89694fc6fdac546fb3ed14f899e2acb37122e38dea949bcf5b9a4d3432e080328826d75ea73cc789e20a6f736c2de2","ssdeep":"384:c+18Q9l8txXmmrz2rQyJ6FT//LciMMGoK3l69WONQvnuq0bzIFG:c+/38txbuYz/nMyK1OWOyvnu9P","tlshash":"5892d1078ae1776c09f0a8432ae89d0d5d59401e5798e133fcd3a9abd8aca3493d3cd3","first_seen":"2025-01-02T12:35:28.07647Z","last_seen":"2026-02-04T23:57:24.443897Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2054,"timings":{"blocked":1037,"dns":0,"connect":0,"send":0,"wait":1011,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/unite/share_unite.js?ver=1749181409","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/js/unite/share_unite.js?ver=1749181409 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:06 GMT\r\netag: \"684263e1-a6b\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 2667\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (527)","md5":"00c6288b67f7750a75b6e9abbf74c8a4","sha1":"5f464f4ce28448acc1c2fe825d4218795b023db4","sha256":"20327edf72e6632c450e8f8e443db2f728361f74b68697932491108c7f483b9e","sha512":"39dac004bb9b904ec4c4bb4d4963c3b8c4c9d98f9a80d90e53134e28c6055831652f0911e59b58f54c4b1e7156d8aba181b90ee3fe0ba6aefb67162b990787c0","ssdeep":"","tlshash":"37513127e6b82006207730a7deee346b556a8426b3417f06b7bc01a54fc58ac7f9270c","first_seen":"2025-06-07T06:32:46.623015Z","last_seen":"2026-07-25T02:29:56.404775Z","times_seen":4086,"resource_available":true,"data":null}},"time_used":2426,"timings":{"blocked":1005,"dns":0,"connect":0,"send":0,"wait":408,"receive":1013,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/custom/poker_custom.css?ver=1598008226","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/custom/poker_custom.css?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 237\r\ndate: Thu, 15 Jan 2026 01:31:06 GMT\r\netag: \"5f3faba2-ed\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:06 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 188\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9ccfa88496aed3c88a644c627d5d4d38","sha1":"08c95c58d5f1b28012acaafca7c162a8d21f006e","sha256":"3df9b0144c0e570d9342f36d1c77acfa605440840a68d0a145b4f2e809fd3a3c","sha512":"ebd0fb98756ae3e662d40af4bf597b42412c0e51f29242a8e69ba2c854e895d84ee172fbd5c50bb0aee261558e22d886171ee8a88fef4fd9c26ab26fff53a16e","ssdeep":"","tlshash":"a9d0a77fbb145dd8584f808ddf910e44b53b1b872a1da861f526945ac0c8160dbf3149","first_seen":"2024-12-10T13:14:37.017873Z","last_seen":"2026-06-19T21:07:00.947215Z","times_seen":444,"resource_available":false,"data":null}},"time_used":1369,"timings":{"blocked":1165,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/unite/prizedraw_pop_unite.css?ver=1733883989","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/unite/prizedraw_pop_unite.css?ver=1733883989 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 6938\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: \"6758f855-1b1a\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1703\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6938,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"f56d937649f436cbd7617abc7b9302fe","sha1":"761345474d919ce27ab91f2e4802763067c30a3a","sha256":"c9e27bfda9106e5282324702332c7bb8fdc46307daa7542be22bb586690a2a15","sha512":"4d99d6d61b1720501131379c1ee5a115e346dc5b271dd2cc3d39a29237034857893a56b757ac21c58d079fdf9e994684ca5b4cb8b404ae5aae0fe6f592d4e0d1","ssdeep":"96:jIjyND5elhmYza9/4Oynn0LDqsEx6hhIArcBlCWhXW5bQMqYsxhe0CKFwfO:zMfeEn0LDqlx6hfcBkW5WN3IhsKFwfO","tlshash":"aee103f0e38f38c97bb797e96eeb0d46a54602cbe202ce04a3595ce55f5a23c3535284","first_seen":"2024-12-11T12:22:16.015061Z","last_seen":"2026-04-11T00:00:37.152071Z","times_seen":4331,"resource_available":false,"data":null}},"time_used":1566,"timings":{"blocked":1162,"dns":0,"connect":0,"send":0,"wait":206,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/890.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/890.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-416e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 16750\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"04c4b5c84fe655c79b8d8763741cc889","sha1":"5bd03ff2316b305419fc94e8504cd842ccbcecfd","sha256":"ecac2f76a9fcaf097da41ffbed824935cbc0d1fbd329dc52f3ad82d09ea4aa24","sha512":"207db48e0f886eaa99f731b6653c74c6b6d9504408ed732b49e9b7ad2697b82ef6dc96fc6b60176bdec4c3ba82b9e414f58abce8e9ffb05e5950130911f39601","ssdeep":"384:65+h4D3qvKfXM4eMTGjKyEMOUFnqDnXjcww5StKN/gwWHDGZZtKwZf:N4jqg8MT1ZYq365StKtgTjOT","tlshash":"6e72d069e194d0b26133fb9f93e56d349ad634874c1abc6c02395fbc701ad8c26a2377","first_seen":"2025-01-02T12:35:28.048683Z","last_seen":"2026-02-04T23:57:24.478594Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2278,"timings":{"blocked":1053,"dns":0,"connect":0,"send":0,"wait":1219,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/930.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/930.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-42cd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17101\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"1b23b89381f2cae808efd8f5c9f6863b","sha1":"c92fc812d7d166abc72099b98ee9cdc136c96c96","sha256":"eca726a2cb7f178d395f8bc3015a7a1d7127593a19c2217f4e9cf3af5462660e","sha512":"38089b40ba4eac73be280541df83a955b28194877696355ceba4ac90ad791fbb31a7e7b84d79c276c00506cb406eb313f1eb57fc9378d7b2e413e3ab65c552aa","ssdeep":"384:3DoKNYyImQET4AJ/czhQlia7uJFrKU9y55SFPpWr5GR8IWDpuWXkkcFT:3DJ+meac9a6ly5qPpWrgR8ICfXMT","tlshash":"e172c0cbc49aadb9f798b10fac50dc4189f2e520ab7a7e480814a906f679f5055cf634","first_seen":"2025-01-02T12:35:28.054155Z","last_seen":"2026-02-04T23:57:24.506982Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2274,"timings":{"blocked":1051,"dns":0,"connect":0,"send":0,"wait":1217,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8680.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8680.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4499\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17561\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"cef62f0d60c8104d1f5155468ec566bd","sha1":"e6588878846e8bae4b6ba6b12e3d5bdfc8c23ef6","sha256":"92f2ff911598224ae9fd9f2264497ca294a14246c80c322e9f43a5837ccb5553","sha512":"0aa550cefa7d8cc84707d4a769b17a8f863fa38a0282d2390ebed5e4858ffe96cd9ab3716c23c4f75ff45487c642c62c65eb137ecf05905d93ef97148a3917d2","ssdeep":"384:yKhp/xQClkwjhUZCanlxFMe3sa6pnucFfwpeIsE91V6dE9:yKPJQC9a0anlP3DIY914u","tlshash":"c872c0efd3f9ac9a547586370a46acabc4ce30365865891b8bd1069c3c55ac1d93c1c7","first_seen":"2025-01-02T12:35:28.092535Z","last_seen":"2026-02-04T23:57:24.425294Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2033,"timings":{"blocked":1029,"dns":0,"connect":0,"send":0,"wait":807,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/moment-timezone.js?ver=1580697220","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/js/custom/moment-timezone.js?ver=1580697220 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"5e378684-2feef\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 196335\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":196335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1434), with CRLF line terminators","md5":"bc45c47c99fe4d26b2b24e46cec399ad","sha1":"221067a4147ece74b03934528ad61bcd4026e477","sha256":"4a65c2af68e89944c3da128c9b329596d930ce09dc9b8ba726b640d812e1fd88","sha512":"1658e474170022d40e698a422f024b4872bff33c78af1dbe98df3a6a99a0f1cd1eb36725ac9fca7bc1264ea491d0a19a2ee0a3a952adba4aba3242c06f830f93","ssdeep":"3072:olpkvlaDD/DCD/DCD2iqWCPrMBq1rGPuAZDDD1DDWoST+piMhrlon5Blu4hK:CkbW0sNpiMx","tlshash":"f714b0292617bb44e459c08bfa3779c0caade18a940614d25f7d57b31fa37e2de68c03","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.393971Z","times_seen":5062,"resource_available":true,"data":null}},"time_used":2432,"timings":{"blocked":999,"dns":0,"connect":0,"send":0,"wait":405,"receive":1028,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/jquery.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/js/jquery.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: \"5f412ba9-14979\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 84345\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-25T07:20:02.685262Z","times_seen":26154,"resource_available":true,"data":null}},"time_used":2567,"timings":{"blocked":1111,"dns":0,"connect":0,"send":0,"wait":407,"receive":1049,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8400.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8400.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-422b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 16939\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"4202bb4698436c1f7bf88335df5f8376","sha1":"1a5fb1453393b9acbd14077b326ecf4c1c55f6b7","sha256":"f2d406da584526d858a1b9cff8dd93bc5546b9ecb6b2fe55c9bb42391e653705","sha512":"4a9efc680419c5a2ab1e614f3b0c2dd78c8ca91d627ef198c19435575d07de51485e07850ae5b809fa11acfb11e031e7b670b016ea3485169b8a9d26aae296b0","ssdeep":"384:psNe9hDKl+IdOChLMG1cwZoowVDAYwvaxoNMyAb+i6:psyzChwGdoowSPrMyFi6","tlshash":"4a72e10cac885dafbbf0596449db081e72d09c98760ca739132aeb60cc7699dd7d5d1c","first_seen":"2025-01-02T12:35:28.07293Z","last_seen":"2026-02-04T23:57:24.406838Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2255,"timings":{"blocked":1040,"dns":0,"connect":0,"send":0,"wait":1017,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8500.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8500.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4d47\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 19783\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"db78e3128dc81e4e10d8ed95ca1cec47","sha1":"15c5d2c3d4e1145e090f33c5c7d33984c1cdab75","sha256":"befd158a07f4f33a2abac31f471a2de07f61eeb2fb38901f51e0b8747e271487","sha512":"d640f67f2040dfafc82a4b29204bcdf3d0c1570bee9a28d863cf7adb04f9af96e1654fe72f22525bf4013f3ffed250afbfaae3bca419637ab12a91d0fa58edc6","ssdeep":"384:MaJLrHKz/gY90NNcrhs6tIJ5uliQGN8UDhnSnnzTeFW6:lJLjK/gY9gNUtIJbXGUdOzTeM6","tlshash":"0192e1f661def62974c583822b4a86b23a18605fc50d9ed1f4d2c7901679be1b3097e3","first_seen":"2025-01-02T12:35:28.071308Z","last_seen":"2026-02-04T23:57:24.417303Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2255,"timings":{"blocked":1039,"dns":0,"connect":0,"send":0,"wait":1017,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/login_custom.js?ver=1598008226","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/js/custom/login_custom.js?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:06 GMT\r\netag: \"5f3faba2-0\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:06 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":1405,"timings":{"blocked":1000,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/css/font-awesome.min.css?ver=1753257975","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/css/font-awesome.min.css?ver=1753257975 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: W/\"688097f7-71b3\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28900)","md5":"31bacfe1d010712cb3837aec4ec1e237","sha1":"3c28b0f6e91fa137ab67c8370f11f60a63d87d02","sha256":"4f0bbfaec56962e62f55bef603cc25d0f56cabce57471131b21f4e9438066baa","sha512":"29c73d08840e5e21c677748c0aa88ee7900968602af5cbb5c6f6bf801c765b64562f4401a49f041aad7e229461be70db9a5a74317bbff479724547013a0d19cc","ssdeep":"384:Qu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:blr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"73d250e8e54c01d66731c48bff81b36862baf73dd5844d99f01f690c29d22a522c5fba","first_seen":"2025-07-24T08:18:25.967403Z","last_seen":"2026-07-25T02:29:56.401828Z","times_seen":2884,"resource_available":false,"data":null}},"time_used":3303,"timings":{"blocked":1257,"dns":606,"connect":203,"send":0,"wait":779,"receive":0,"ssl":453},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/860.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/860.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-45ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17900\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"0f6add9f0d7ee9702f7664819c25500b","sha1":"e1b507000343692a8cbbbad528111f17fef52872","sha256":"17fd24ed97b49bf3d9f7f9681fd8ea3b9d1df37e9f0917d926a2013fd97af2e5","sha512":"cfbc7acffe78bc1a70d04fc1f8cc08e76d763dcd7586a072a402ffd2368346f5dc7ffea19e42f46411b0e9d42185da98b8f63d35f0b81a22950f7ea15b925c60","ssdeep":"384:5oOuv3iIMCGuKDW2joLsckuonaJNe+LJ/ZtV/3cAGigchXwBaVvPfu:5/uv3tFDKljo+0N/9/ZtV5GoBwEVvPfu","tlshash":"ea82c07559efe69c426d5131bc137b21e73bb75096b8132883191631d4c1ac909e86ef","first_seen":"2025-01-02T12:35:28.032713Z","last_seen":"2026-02-04T23:57:24.396965Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2294,"timings":{"blocked":1064,"dns":0,"connect":0,"send":0,"wait":1227,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/630.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/630.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-50e7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 20711\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"ac6672127a2a9af267f536783e54abed","sha1":"0667934ceef2670cb861ff4aefd9127528a40b65","sha256":"ab92c481039f3f868dd303f3db74935414799375e018856d37f7e7bd17265586","sha512":"8ba17efab732b8a420af8762c3326a5f697cbd35d43f4e84fe1a88fcc652f5e9614f678fc87293e3ff3cd66cac9b542f831508ae36851148f36655ee0483a067","ssdeep":"384:4RdVt3jHHk83oS0ihExruUcXHD1yQVSGsD6VZR+renJoamGuqKs:4XVtTHHkZ+9DHOWR+renhm7Ps","tlshash":"d892d13ca324895756b030456440def50fda19c62dbfe5c3a4cba2f117336b57ac8883","first_seen":"2025-01-02T12:35:28.043709Z","last_seen":"2026-02-04T23:57:24.421973Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2281,"timings":{"blocked":1055,"dns":0,"connect":0,"send":0,"wait":1220,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/2030.png?ver=1677641599","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/2030.png?ver=1677641599 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63fec77f-5f9a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 24474\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24474,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"8dd4f545f6bde89be5046e69e118723b","sha1":"96cb516e0fe01d7f1d6935a9c3539b58accc4a43","sha256":"8807f36332932254687290510863a5207e3c42c09f5b0b8376189d34b964c961","sha512":"92ce24c9c187b114d3de9eb37d6b578102060f61962fab897409d74744e01a3740bfd1793fe5a91d9db3638847d1ced404db8d7112192820690e0fbb9fea1a3c","ssdeep":"384:xjnaRbTYWhROvz73NKC7uWANX7Vfk13Dd9NKS9hxxeToGFZnnFRh1Q1jx07:V0TY243UWAR1kND3HxuoGbnFn157","tlshash":"fab2f17620b86b5b3a7670723d1c6d184d1420b129021a2eebf5c7fe7a2b3ee0595371","first_seen":"2025-01-02T12:35:28.086678Z","last_seen":"2026-02-04T23:57:24.448561Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2039,"timings":{"blocked":1031,"dns":0,"connect":0,"send":0,"wait":808,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/730.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/730.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4b18\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 19224\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"8a15de57801776d072127f300050a9e6","sha1":"2bfb19fcb6a3d5859ce8edbacad45493437a4335","sha256":"d66d3d79b241fa97dbbfc36ab6a013b2c703704477be6de26760189af73188fc","sha512":"6b9ea4147088cc910d93cb4b525db0bef528bed176cf8621041e7dc356adc0604b124b199b6668e018e25a6c1b155c96ea53dbfdb6241d3fdcbbb8a299b7bb4a","ssdeep":"384:MGvuRitMLxErYdgTw69iYcveX++NuOOuV+IhsGJGoAVEaqft:lvdrYdgkIiYcu++k5ukIhrJG9V3S","tlshash":"5982d003a5943f7e9b7a3dcc185920b3e045bb886769dd0fd718a0ba9ccbd14a662e50","first_seen":"2025-01-02T12:35:28.042524Z","last_seen":"2026-02-04T23:57:24.39239Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2283,"timings":{"blocked":1056,"dns":0,"connect":0,"send":0,"wait":1220,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/unite/jsencrypt.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/js/unite/jsencrypt.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"5f412ba9-db4e\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 56142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56142,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13814)","md5":"64507221feddff84c80b99c98827d76c","sha1":"5c7000638c6bae1a1c448367822a8682d59d371f","sha256":"5a0be406a1bdf94a25a9d142d4124e3dccbdeb5593cd78fb0bd234df89dd7389","sha512":"cc3beba9e9c0d1e149642c41b2bcb351972f8a1bcd9445dbb5e32feb6c91c5d851e2cecad5a6b3f8b8ec4727e4e8cf9824bc80244baeaae20023c23c1a02c2f0","ssdeep":"1536:cJxLSEwwmr2yZPp8yQPj6OR1fdfqovoRonm7f6T:cPErPp8yQPOOR1fdfqg2l7f6T","tlshash":"cb43e9853ae6b075039a50f0051f084ab13ab92e192f44ecf699d8e17cb584d637ffb9","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-07-25T12:58:28.739379Z","times_seen":20181,"resource_available":true,"data":null}},"time_used":2438,"timings":{"blocked":1003,"dns":0,"connect":0,"send":0,"wait":403,"receive":1032,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/620.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/620.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-45fe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17918\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"ce4da5ff033737dc2b921fb16f36ecdc","sha1":"dae001b9c38ed811a03dd50b1a4b8b187078965f","sha256":"bc428961eec9572541a7db6dbe38f698cbf1a43b81f79bc06ac02569ed3eac58","sha512":"43dd4685bcf52c1afc1fc8355a8acf498d4972583927cdc83798c7498a1820e1351d3823518d56130c1b6cff631ba2eb4efae252986dc5b3d4657f09e8b19228","ssdeep":"384:VmoIUqKxPN7b6Th4m/f36zYnRWdGyIsWajNRj4UsSG:VnIU9PNf6f360RWIwWaj/4yG","tlshash":"f882e160984e841914dfbb25ceb4ef5ad1b15039eecebe62e55d9f3849f9cc24e04b10","first_seen":"2025-01-02T12:35:28.021746Z","last_seen":"2026-02-04T23:57:24.385853Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2487,"timings":{"blocked":1069,"dns":0,"connect":0,"send":0,"wait":1229,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8280.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8280.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-3de6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 15846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"e5371c3c67b2cbebfc06259dafa66e98","sha1":"3d357dfc5c305154d18788a0d010ca1749bfd5e9","sha256":"e2f1ec932a128ec561e170481a20550bc1099a39e8f8a9a549d0ee7849bdd223","sha512":"99f27af74611f7d54c86b63433848d69663d57bb7dc126f6a7ee4b96b180f9925f55a079d7b062e6f5743787cea87dae9331f46a6c49c75b78f25661ba900efb","ssdeep":"384:bPVbJPuaNTkOqgvDzgXiTUSbUSsC7PyeiEZ/:nPr1lUvY7tik","tlshash":"9e62d0f02cfe99829dcdcc144fd36a03341d59eaa59cdabb626db1059137505c8f50ed","first_seen":"2025-01-02T12:35:28.059157Z","last_seen":"2026-02-04T23:57:24.479556Z","times_seen":78,"resource_available":false,"data":null}},"time_used":2267,"timings":{"blocked":1047,"dns":0,"connect":0,"send":0,"wait":1216,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images/en/dc_hot_02.png?ver=1685675648","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images/en/dc_hot_02.png?ver=1685675648 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:26:43 GMT\r\netag: \"64795e80-660\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:43 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1632\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 47, 8-bit colormap, non-interlaced","md5":"ba37ee8d719a13ca3e07b0810074e50b","sha1":"4e9329c449a4b007549106f6cade68bc534ed653","sha256":"8d4f4fb697abcd11367ec7a47696698ea7ee4fbd9dae93ef1cc6d9c7dbf097e4","sha512":"44c709bdfae2fdaac57c74d956252ccf03f929652d6e700c741327e50061e177b22311f4a0159b27b1275d2bbed26d3588a12a7d30cb96747e8db04d31305060","ssdeep":"","tlshash":"4b31ecb7595a2c30b07df17ca98a6e5392f0c03d5b109c73939dd1dc4d29b5e9846217","first_seen":"2024-11-30T11:32:18.232371Z","last_seen":"2026-03-04T08:07:04.803381Z","times_seen":655,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/cms/cms_1079.png?ver=1612879501","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/cms/cms_1079.png?ver=1612879501 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:19:11 GMT\r\netag: \"6022968d-1c3b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:11 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 7227\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 251, 8-bit colormap, non-interlaced","md5":"55573863bf4ded810402032c178c8e18","sha1":"609490d47a02fd8d334d81f60a425d87541320ef","sha256":"c9c97016a7a15844a8d8ba4240275ac28ccd0463c70a379fa3f7411ec237186a","sha512":"9e2ca51c6f1ef5bc69edf0c5fb49bc10ff94f465dd36f7055f9a1882085bae56f61175f8918dcd3226060fbedd2f6d1d82d5fa37815162e5c438504228bf999b","ssdeep":"192:dk93OLNzYheZwiT/PHnkAXuHVu1h2AxPJguyTvEj:m3OLNzUeZwYPn5WAxKlTK","tlshash":"c1e1aefa5a3b3c54c0aa321547ddb04a9134778a9f0d1293ff2686a82cadc5d25d53c5","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-02-02T09:08:19.833598Z","times_seen":3243,"resource_available":false,"data":null}},"time_used":2521,"timings":{"blocked":1100,"dns":0,"connect":0,"send":0,"wait":406,"receive":1015,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/login.js?ver=1597629260","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/js/custom/login.js?ver=1597629260 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:06 GMT\r\netag: \"5f39e34c-bf\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:06 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 191\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"24bc8669caf172f2c17a06fcd73ae539","sha1":"3bad8f340bca43d8fb98c3ca39def12f816769a8","sha256":"29df48677fd1c2b2a602c35faeadd3693f083b78550b2c0f3108f356c34b74bd","sha512":"0b4b2dc35f8b97238079334be832751d1e33dfbbddda4961c38127afadcb088101bad71b0442bd810930df2658dfd9f42da0b08d44bb1e1f1dd0a5dde33423a3","ssdeep":"","tlshash":"f3c02240b13f377c587372a0803a0506df73701c1c0056e0b0b842a02c187040813c78","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.416995Z","times_seen":5059,"resource_available":true,"data":null}},"time_used":2426,"timings":{"blocked":1004,"dns":0,"connect":0,"send":0,"wait":409,"receive":1013,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/css/font-awesome-addsvg.css?v=2507231","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:19.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/css/font-awesome-addsvg.css?v=2507231 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.segrft.com/plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1768440735\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: W/\"688097f7-5ce0\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23776,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2811)","md5":"6097f31c1b8ed2b58b36a26a704531d1","sha1":"f9d2b2c866d186c372ff6c11d5f69e608ca0f457","sha256":"4acd44ed0da6eae50d2f4b38649e6085c73d3202c08ba85870be5e0eb80a55c9","sha512":"a02f15b6e01f10bac28e3e1e24f8605ab65bf0c1e0a10b6746cae341194037cc71b124f39ee75fbe28bd1175f329e7065595437131f8856801c574642b84acc8","ssdeep":"384:AD+8djF3PcO3Pc4XfVK2wMXyWq73r2wMXyWq739WqMWqq2gw/2gw72fQ62fQ99:S+wxBjVHyvjqyvjUi1wDwq9","tlshash":"86b263b2460a78e24d143b3bd2a92a0d574dd6e2fe93ee56d07609588b0ff1837471bc","first_seen":"2025-07-24T08:18:26.078876Z","last_seen":"2026-07-25T02:29:56.39522Z","times_seen":2883,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/js/www/decrypt.js","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:16.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet83091.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 17:39:21 GMT","end":"Mon, 16 Feb 2026 17:39:20 GMT"},"fingerprint":{"sha1":"11:CC:96:86:39:6F:13:F3:65:B5:6A:F3:CC:2D:C3:20:45:E6:62:CE","sha256":"8E:00:8F:23:F5:A1:E2:26:C7:79:F2:F7:22:D3:CD:F4:DC:31:5B:E6:DD:D9:26:DE:B4:43:F2:45:61:AC:50:9B"}}},"request":{"raw":"GET /js/www/decrypt.js HTTP/1.1\r\nHost: bet83091.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/poker/186\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilk3MEY0OWt1TEN0dXh6U2ZcL0FcL2YxUT09IiwidmFsdWUiOiJCNEY3YTNlalJqd3NDb0lHdDBNUUptUXNGVlBUNUtcL2RET1NUbjMySEsrWURoSXk5T3hMQml6N25NOGM3XC9pVUtSQmI4WExpWmtBejZYUUxnaERiXC8wUT09IiwibWFjIjoiNGIzZGM2NzhhYzg3NWViN2UxZTYzMGNjOTQ5ZDdhMTFmOTA0Y2I3NmRmYjdlZmVlZDZhZDc0ZWIzOWU3MTU1NSJ9; vanguard_session=eyJpdiI6Ijl0aEhEMDhhMG9qelwvWWhuaVNhYkZRPT0iLCJ2YWx1ZSI6IjRvdWJLTzJzeFR4djlWV0psNHMxaW5tNmhmWEZKQmYzWHpRcWZocWhlSEp4aEpnR2tqZDYxZFJGWlUwVENPbFB1YnFTNVFPbjlUVnVLSWhtQmF6V1J3PT0iLCJtYWMiOiI2OWYwNjZiNjE4YTNiNTM3ZGNhNjQxODQ0NTIwNTA3MGMyOTVjY2JmM2QzZjc0ZTg2OGUzM2ZhYTRkOTc4ODZlIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 15 Jan 2026 01:32:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 531\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nEtag: \"65572be5-213\"\r\nLast-Modified: Fri, 17 Nov 2023 09:01:25 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"1d1d23f897c7f9fa4b24eeb8159d7e21","sha1":"9c6ab5fed65abe81454978f1e844c4f36d61a1c7","sha256":"8da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869","sha512":"4d258cf5b37b503615a1373aebf3474ec8f94351455729665223a9318067ca6b815d0bf3c265ead937660bfb3b0e75b25f450ef1b235a64b32d87df01e1b8e32","ssdeep":"","tlshash":"b9f0bec8adaffdd4add295d2627ec809a99315430209df52b688ac1c9fc80281a2b0f1","first_seen":"2023-12-21T07:44:20Z","last_seen":"2026-07-25T02:29:56.42339Z","times_seen":4755,"resource_available":true,"data":null}},"time_used":1598,"timings":{"blocked":640,"dns":1,"connect":316,"send":0,"wait":316,"receive":0,"ssl":322},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-15","alert":"Phishing Block","trigger":"bet83091.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/870.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/870.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-43e6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17382\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"dd49ff0cb5d536c6e03591f2418e092d","sha1":"e97c96351d4e438d217a6838bdfefbd24f35c254","sha256":"b1aab4d444e08adf9387860e7a23853865768901ef6329a7ba5ef17ca59a3b1f","sha512":"69ac39aa0894a5d777995899bb2346d4eea8f5bf7cb23dda8b0327184ee18349d6973fb35bb352a9340d16def4d1d698163a2235c6aea920b6c4a61c63bd4edb","ssdeep":"384:Cq/GoEc2nwmRy3jIXKB88mxvvgUUfS/VmmtNbMw0d:Cq/X2nwmRy3i8QvIRSNmeb4d","tlshash":"2672d0733e83683965b9b86306f68ec66c65cf2faa4d38787d316308da1235cc745b80","first_seen":"2025-01-02T12:35:28.040698Z","last_seen":"2026-02-04T23:57:24.517086Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2286,"timings":{"blocked":1057,"dns":0,"connect":0,"send":0,"wait":1221,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/footer/footer-gt.png?ver=1600747940","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/footer/footer-gt.png?ver=1600747940 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:19:11 GMT\r\netag: \"5f6979a4-168\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:11 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 360\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 32, 8-bit colormap, non-interlaced","md5":"c8b8b09e3d3f8a69599182c5df680895","sha1":"0522f162609c91017ac5977eebb1ebd207a57525","sha256":"ac257cdb0555003da4b484189c57e37c9758258b6fc0fa653ce17252c6e54f41","sha512":"b3d5b74b08547d7084a4ba0cba601c51ec7cb4ba9ad3bd05471f7cc3ec0ee7f6b0b954d8bb20439928be26a6a0f2e7f92ec27b95ff04fc326074ac0fe14efb47","ssdeep":"","tlshash":"9be02051ff2ad839d1e75f755adf4185dc9ed0f8fc23030632520d10162e890a3b4997","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-03-19T07:12:23.034263Z","times_seen":4987,"resource_available":false,"data":null}},"time_used":1835,"timings":{"blocked":1027,"dns":0,"connect":0,"send":0,"wait":806,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/920.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/920.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-3a3d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 14909\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"c90af9ec07f5da4571c3d0f457f081a3","sha1":"fe3cec87c90ad8b854ccc6f512ef936544ffb129","sha256":"37ed164ebdf1067e1dfcbba27207d34933b9318b8ba0fd4158ee1ddf26fbe055","sha512":"81a79b86651ee7622ab07baa7749b37839c7f0c75f63d1f6781bca56c4cf67d950b0f9248899805dc9164598ecbb458c0196f80c16b0e53224ec498c6f0b3c19","ssdeep":"384:iuHDQAhHtBaRyZyzMmMB9CyQTk3xgZyRn:pDQA0eHUTV0Rn","tlshash":"a762d0bb8d5a2e48e542553eb9fbd2b854d2164fadbf1e05f8d2c23081c80f617e1836","first_seen":"2025-01-02T12:35:28.07995Z","last_seen":"2026-02-04T23:57:24.403879Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2046,"timings":{"blocked":1034,"dns":0,"connect":0,"send":0,"wait":1010,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8660.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8660.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-48e4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 18660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"74ea1eb7f3f7fb355dfb773eae43686d","sha1":"b2fc8be13ff7125112f84bfe6f1b2053d26b2e13","sha256":"de8f73dd7240cfa2282b0ac13b20b248acfd34049efc36326c4138b3e36da461","sha512":"766f457561413c00f199d203dda094bc7ee6b73fb583869d054de79e15606d6f67b0fe9fab1e06a1c258ccfac535ea3c0d1520958b910137adfc3fe4c16ec21e","ssdeep":"384:umKc0NoYLJUUAUdMyuV5gH5qJRRctY8qsYb8f8:d0aaIA6LgsJLctY8FYbO8","tlshash":"5582d198d579d8a1adee740b92a8763c7825c383f6457c360c09b8c9ebacd7007c4a86","first_seen":"2025-01-02T12:35:28.081661Z","last_seen":"2026-02-04T23:57:24.394265Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2048,"timings":{"blocked":1034,"dns":0,"connect":0,"send":0,"wait":1010,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/swiper.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/js/swiper.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"5f412ba9-1bee5\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 114405\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114405,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271)","md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.434546Z","times_seen":5157,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/main/favicon.ico?ver=1598008032","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:21.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/main/favicon.ico?ver=1598008032 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/x-icon\r\ndate: Wed, 14 Jan 2026 23:55:17 GMT\r\netag: \"5f3faae0-47e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 14 Jan 2026 23:55:17 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"e13f45bbeb4b9056cfa3d6bd2453f70f","sha1":"dfc879f8f7279ec929478feee93d9b2fdacce0b1","sha256":"331b713de169d0e56bc71fee2c7df0795b24d5b24c045b3af1a27668783a1d2b","sha512":"006f2e5dfeebaaf68972ca99f01c38fa00bf56cbc043f7983eeaea4272b04641844086d62d345b29b99e67044bb86292f0ee8edacd94f90fc270626c990d16c4","ssdeep":"","tlshash":"50214218f26b240bd77a943015c3dda780988e1b618c6ba1855db630fc34e39139b4fc","first_seen":"2023-05-01T12:07:07Z","last_seen":"2026-07-25T02:29:56.431223Z","times_seen":7074,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/main/logo.gif?ver=1612839866","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/main/logo.gif?ver=1612839866 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/gif\r\ndate: Thu, 15 Jan 2026 00:19:11 GMT\r\netag: \"6021fbba-3bd1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:11 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 15313\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15313,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 224 x 91","md5":"3719047940db89e415097aa46f3bfe51","sha1":"ffa944db5a95f8771081a2147ef08115095d55b9","sha256":"819ed93b5f94181c65947ee5e77fedd1237ab03f8c9d2ce75e2811405d0114f7","sha512":"fd156ce12d4ea6ad124da6388022dd6349d96c3b5ce05953850f91d6cea30a7215fd9aea4307650671c564b9ef15110beb89df019c25b9bee39963607761ba68","ssdeep":"384:WnG3n4ZBE8t/DRPm6/EG4U50BE8t/DRPm6/EG4U5+:WamBE8t/tPm6/EJBE8t/tPm6/E7","tlshash":"a0627c0dc17771fef15a3ab076223f090d9489b86d069ee5c81cabddfd8d04e4198ba6","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.420018Z","times_seen":3293,"resource_available":false,"data":null}},"time_used":1706,"timings":{"blocked":1096,"dns":0,"connect":0,"send":0,"wait":406,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/leg.png?ver=1659683715","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/leg.png?ver=1659683715 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:26:41 GMT\r\netag: \"62ecc383-8b3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:41 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 2227\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 93 x 55, 8-bit colormap, non-interlaced","md5":"a8af2ff3b033459531c618b69e056ecd","sha1":"ca874d638f3105061e38a79c6b8d30010484b0bb","sha256":"f19d96b2e78c368d549c2c2e9888f1d9f3ed0074f376ed03e39510b25f54f101","sha512":"85adc0cbb72a18a07d9826d59108dad11498264bdb084c00cc49580658a2eaf102b070eb5e64dd2a31d47b74d550fa790775cc7bbfc2be5b8c021b9134db66d4","ssdeep":"","tlshash":"e1412cb22de3cbe55a4feb93f163c05fcba0554949a7437e9dc1c15945e205905dc390","first_seen":"2024-12-10T13:14:37.130455Z","last_seen":"2026-02-04T23:57:24.378126Z","times_seen":437,"resource_available":false,"data":null}},"time_used":1690,"timings":{"blocked":1085,"dns":0,"connect":0,"send":0,"wait":407,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/0.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/0.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-50d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 20694\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"6115c0e60ca47cfc6f549681a582b4f2","sha1":"c77b8c184781cd2b1b1f433bb2df2bbc09b5ba5d","sha256":"ad1a91ef24d2a42df948e6e77ba2645f33bd0ee667a203ee5186645ab0da7c40","sha512":"3a0fbe933ff405d48e25c64408a80d2568086fbe3da981857b6ce2055ff0454be0d6e28412b03c519ead224a6a9ef02ac3ee53b5fed06b2e247502bd2623255e","ssdeep":"384:1MusfLe8oD5to34pEGMN3eDZw8nbQydEbUoHrrjmWQauKZoC7O0oD6e8G:1NsfKD5BEU04EbUoHxpLZd0j","tlshash":"f192e00daa5ee1326b0c3d407c2b420339f8163a2badfb353ca176950592df670694fc","first_seen":"2025-01-02T12:35:28.02378Z","last_seen":"2026-02-04T23:57:24.515925Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2485,"timings":{"blocked":1070,"dns":0,"connect":0,"send":0,"wait":1229,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/csrf","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet83091.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 17:39:21 GMT","end":"Mon, 16 Feb 2026 17:39:20 GMT"},"fingerprint":{"sha1":"11:CC:96:86:39:6F:13:F3:65:B5:6A:F3:CC:2D:C3:20:45:E6:62:CE","sha256":"8E:00:8F:23:F5:A1:E2:26:C7:79:F2:F7:22:D3:CD:F4:DC:31:5B:E6:DD:D9:26:DE:B4:43:F2:45:61:AC:50:9B"}}},"request":{"raw":"GET /csrf HTTP/1.1\r\nHost: bet83091.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/poker/186\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1PTUhuTUpLOWc1WkN3MmVMNEVRNHc9PSIsInZhbHVlIjoiUm95eTVNYkV4aHVHNXBja3FWblZZRklUY0FnbHBZVHFJUVd3M0RyMElWa1ZBcnJYR0V1OThYclpKOVBvYThoSXlpd0M5d2l1OTEzU2MxU3hvbEZSMFE9PSIsIm1hYyI6IjM3YjhjNWUyMzYxMzc2YTU2Y2JkMTU2MmNkZmI4YTJmZDI1ZGUyYjFhMmExYmFmOTk3OWM3MzkyZGQ2Y2MyZTcifQ%3D%3D; vanguard_session=eyJpdiI6Ingwb1Nvc2VKMTg3eU5lbFhcL0pmdmN3PT0iLCJ2YWx1ZSI6IlNGd2dWQkZVanFKRFNuZHlcLzRaTk9tU3o3UmdsaXcwUEthQml4blpEbXl4dVZcL1pDZTM1WUk0NjVOYTNINGIrdmxXTDdDTUN5d1BzUkY0bFk4NStOWWc9PSIsIm1hYyI6Ijg5M2I5ZmJjYTkwOWJhZjY5OGUwNjNiNTk2NTc3YzdmODA4N2U1NGViODBjMWYzZGRlNzM3OGMzYzhlYWVmMTcifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 15 Jan 2026 01:32:21 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: no-cache, private\r\nContent-Encoding: gzip\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IlJhbDk3WFhRSk9cL1kyVUQ5b2pPS0xRPT0iLCJ2YWx1ZSI6ImV1RTE1enU2UGVBVVhBRGVZN1NRQVZ3TmJHTmFQTUJnVlwveEZLZ2Y2Qm50SjRoQ3JlaEQ1RWhXRE9CZkI2VmxtY3EzODVUck5MUXplSWdaSEJVWUZPUT09IiwibWFjIjoiZDBiOWY0OGMyNTkyMmVkNzQ3Zjg0ZjVkZTNiYTIyY2EyNmE0OWM0MTQ4ZGM5MTgzZmQzMDkxNThkMjZlNjFhYyJ9; expires=Thu, 15-Jan-2026 03:32:21 GMT; Max-Age=7200; path=/; secure; samesite=none\nvanguard_session=eyJpdiI6IkxGMmhkNmhiYisxRzZaRXlicTZIZFE9PSIsInZhbHVlIjoicjhKZVhXNUhrejFKS09Jd2tiMEVZXC9oa2xROVY2ZUtBYzMzR3NyYUYzbjVmWk1QRXBLQXF0Q2N1Y1g3MDdOcEY5V2diQXZBUTJQTXV4Q2NZMDdnVU93PT0iLCJtYWMiOiJmYWRiODNmNzUyOGY5YzkxZGU5MTk1ZTVlNmE4NTJjMmUzMjBkZTBiNDllYzdhYjcyZmM0YjY5ZWE5MDdiMDJkIn0%3D; expires=Thu, 15-Jan-2026 03:32:21 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0e950eab29a3451923f222b05b72bc25","sha1":"b62c2abd0318b5e9165ca9321fb85580c6bfbde7","sha256":"6ca3c9395145e6e6ac98df1bbbd6463f1f8e33863f588d319416cef682b75e27","sha512":"8280c50d29505dc9ac689f6ca9b77baeb842007d1d191fcb9ca92938ab60455bd52563b61ce0330853ffd303b85e5e67ef30d11ec51092b3abd2b5d05fd19047","ssdeep":"","tlshash":"d19004d40d15f3d00344d353715d001017054f1dd737c4011d0d54114574c37c55dd11","first_seen":"2026-01-15T01:32:44.556065Z","last_seen":"2026-01-15T01:32:44.556065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":512,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-15","alert":"Phishing Block","trigger":"bet83091.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/950.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/950.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-437b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17275,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"eb8afd2b14c8082b4fa33ba279bfba3d","sha1":"7d0f7867271732bb572db20d9419735075ac15ab","sha256":"f9d1746a3b3fa561850366e68ed385f668b5a5fc600fc67672cd9b34b8935764","sha512":"ad143a452672af94d19b73be0ac91a8afad6e374ea3a59fbeb5e28b4efa6ae6234a894675d1ba17f2e96413a2bf1fd3901d7a995506659a163fa6ddec4441cc1","ssdeep":"384:qbfOSJp/2koMK4B5pBYUMj2yPxaTsyqns6YRop3TfsNS6MaTy:qr2j8pBw1JIopYy","tlshash":"6672d0be0ed21f4e5ff1a14ca1f3c9008989bd6a1ddf5d73d6619e421f6260922ac888","first_seen":"2025-01-02T12:35:28.060841Z","last_seen":"2026-02-04T23:57:24.463748Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2264,"timings":{"blocked":1045,"dns":0,"connect":0,"send":0,"wait":1019,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/plus/js/unite/crypto-js.min.js","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:16.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet83091.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 17:39:21 GMT","end":"Mon, 16 Feb 2026 17:39:20 GMT"},"fingerprint":{"sha1":"11:CC:96:86:39:6F:13:F3:65:B5:6A:F3:CC:2D:C3:20:45:E6:62:CE","sha256":"8E:00:8F:23:F5:A1:E2:26:C7:79:F2:F7:22:D3:CD:F4:DC:31:5B:E6:DD:D9:26:DE:B4:43:F2:45:61:AC:50:9B"}}},"request":{"raw":"GET /plus/js/unite/crypto-js.min.js HTTP/1.1\r\nHost: bet83091.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/poker/186\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilk3MEY0OWt1TEN0dXh6U2ZcL0FcL2YxUT09IiwidmFsdWUiOiJCNEY3YTNlalJqd3NDb0lHdDBNUUptUXNGVlBUNUtcL2RET1NUbjMySEsrWURoSXk5T3hMQml6N25NOGM3XC9pVUtSQmI4WExpWmtBejZYUUxnaERiXC8wUT09IiwibWFjIjoiNGIzZGM2NzhhYzg3NWViN2UxZTYzMGNjOTQ5ZDdhMTFmOTA0Y2I3NmRmYjdlZmVlZDZhZDc0ZWIzOWU3MTU1NSJ9; vanguard_session=eyJpdiI6Ijl0aEhEMDhhMG9qelwvWWhuaVNhYkZRPT0iLCJ2YWx1ZSI6IjRvdWJLTzJzeFR4djlWV0psNHMxaW5tNmhmWEZKQmYzWHpRcWZocWhlSEp4aEpnR2tqZDYxZFJGWlUwVENPbFB1YnFTNVFPbjlUVnVLSWhtQmF6V1J3PT0iLCJtYWMiOiI2OWYwNjZiNjE4YTNiNTM3ZGNhNjQxODQ0NTIwNTA3MGMyOTVjY2JmM2QzZjc0ZTg2OGUzM2ZhYTRkOTc4ODZlIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 15 Jan 2026 01:32:16 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nEtag: W/\"61dff778-bb78\"\r\nLast-Modified: Thu, 13 Jan 2022 09:57:12 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47992,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47992), with no line terminators","md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-07-25T02:29:56.444036Z","times_seen":76980,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-15","alert":"Phishing Block","trigger":"bet83091.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/510.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/510.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4763\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 18275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18275,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"fa6cf4c437797f106534805675261037","sha1":"ea65dfab77b4d3b0b9bc41049f438ef39aab48d4","sha256":"40aec1cfb3e4158b4620cd00b12c8407909d06e8fb178d74e0190b1802d224f0","sha512":"5f69f4f7606224e7899965110ff97d6a615d0db6eed4b9e5de1eb9e89aa0159485cc3dbf3364830dad9659c42834afd205b70886b011a1dcc99a8e86355a73cc","ssdeep":"384:6xyoP8KWpVKmXI09oAGnFJZIG+jpAhkvQcwMUolNNh8p0r1piWr:qy+oPPo9FJqjWhO7wMUoljhI0hpHr","tlshash":"aa82d0176f3f140bd2ce977af66134da76c1291178af00e957e6a48b3180b0952d3d35","first_seen":"2025-01-02T12:35:28.057647Z","last_seen":"2026-02-04T23:57:24.423825Z","times_seen":78,"resource_available":false,"data":null}},"time_used":2268,"timings":{"blocked":1048,"dns":0,"connect":0,"send":0,"wait":1216,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/990.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/990.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4bd8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 19416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"997442fdd795037575d622af635fa3b3","sha1":"2c045937d2dad4181f9dbd9ff754a7e49a3ffe1f","sha256":"be127f0bf8e7e00cd59a55ac61f2bd0be5c82be63cf56e550f94f6c2d6b6d59d","sha512":"e1f9e4e49af2f9c5041a698523a58e8d4ffd51312af05b9c98d3e1a90e516ebd391fae2456a6d49a00a903650e02bdcd890218e60f07586ce6ef6148d1b568d9","ssdeep":"384:azL7eijdG+EsCUOQLMX84WeHhb8J4IookCDgmNY6g7Lsg16B:keuEsCU1C8qwLookCDzyKg16B","tlshash":"d192d09e923cf4aae760305795ca053d8f1381577eb7c35ad0e519b6bb48bae21c9108","first_seen":"2025-01-02T12:35:28.063383Z","last_seen":"2026-02-04T23:57:24.419202Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2262,"timings":{"blocked":1044,"dns":0,"connect":0,"send":0,"wait":1018,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/js/jquery-ui.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"5f412ba9-3dee5\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:08 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 253669\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-25T16:27:19.297845Z","times_seen":22830,"resource_available":true,"data":null}},"time_used":2459,"timings":{"blocked":1007,"dns":0,"connect":0,"send":0,"wait":408,"receive":1044,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/unite/header_unite.css?ver=1744941935","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/unite/header_unite.css?ver=1744941935 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 4957\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: \"6801b36f-135d\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1796\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4957,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b934b75c09f2645b1e46dc5a89d13fe9","sha1":"91a38586f325f7b98af5eef96d66f38a04dace2b","sha256":"f17daf0db63aa8fbab2a4a73efe37469d9b17d13df2a1d7ad0512671c6ebb408","sha512":"d8e77a3eeb8a2d055767cbbe218a53bafa85c99fa3efaee736a4dd74743b922e6d64115317560c72969d0e3496c13f5b684803ca71ff6b0c4b3f7c0fa7122862","ssdeep":"96:N1/uCASG8K0h91s2sqVKnmqHuRbElB/sAx7BdlAfq0WO:N1llK0h98nHkbaB/HB+N","tlshash":"56a165ba9304100ab367d56578a0cfea63bfa1918442ab7dadf9304dc4ce1d456f62c5","first_seen":"2025-04-30T10:38:17.688345Z","last_seen":"2026-07-25T02:29:56.437741Z","times_seen":4307,"resource_available":false,"data":null}},"time_used":1726,"timings":{"blocked":1118,"dns":0,"connect":0,"send":0,"wait":406,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/610.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/610.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-480e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 18446\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"83b2241f7330c7eda57dc930bc4cfbdd","sha1":"b603fd6501fb02cedac77c974731efe5d09ac95f","sha256":"780accb376ab56992c178a5c438f549b3d22f96526c8285302cfe46e73101f20","sha512":"60167d3166ecd1bb949d117a2b8978f2b56fef121db1ccdbde7c9f21fbdcbe4c894296b41debadbcc3c774bbeffd116e98d36b4bba872d3f87bcb918cb8ffafb","ssdeep":"384:QV2unS3pC24T2ZOSQZg/fa/Mgxf9drWRU537XcJfLXkdeyOj1XLaMkGYZwkXKQ:K2kSZN4T2gSPa9dSRJLuVAX/k9wkaQ","tlshash":"ea82e1806a569337fe7ba122d58c8bf055446f1e31dd31d1d038ace9f472e7e00b46a5","first_seen":"2025-01-02T12:35:28.047173Z","last_seen":"2026-02-04T23:57:24.489468Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":1054,"dns":0,"connect":0,"send":0,"wait":1219,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1768440735","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1768440735 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 15 Jan 2026 01:32:19 GMT\r\netag: W/\"688097f7-71b3\"\r\nlast-modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nserver: nginx\r\nx-cache: UPDATING\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28900)","md5":"31bacfe1d010712cb3837aec4ec1e237","sha1":"3c28b0f6e91fa137ab67c8370f11f60a63d87d02","sha256":"4f0bbfaec56962e62f55bef603cc25d0f56cabce57471131b21f4e9438066baa","sha512":"29c73d08840e5e21c677748c0aa88ee7900968602af5cbb5c6f6bf801c765b64562f4401a49f041aad7e229461be70db9a5a74317bbff479724547013a0d19cc","ssdeep":"384:Qu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:blr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"73d250e8e54c01d66731c48bff81b36862baf73dd5844d99f01f690c29d22a522c5fba","first_seen":"2025-07-24T08:18:25.967403Z","last_seen":"2026-07-25T02:29:56.401828Z","times_seen":2884,"resource_available":false,"data":null}},"time_used":1548,"timings":{"blocked":1143,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/main.js?ver=1598008226","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/js/custom/main.js?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:06 GMT\r\netag: \"5f3faba2-78d\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:06 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1933\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6a579f2e4d3b31b3ea017e7b03a475dd","sha1":"8d9a6430face051ae1365d421f15c60cff36613c","sha256":"ca0d1288490dab47eb98606d7e519b4be96e1d5f354b8cf4a6ef39dd1846c41c","sha512":"e5c65863509fb786d1a2ac8a1c0e0ec1446158037079a067eb6976040a0d912e326c2254e7968a7e22ae794d3adad6b9bfccbd2a4eb35dad622676d3a989d742","ssdeep":"","tlshash":"1941cc1df9f665c208b730164f3f451c2163a81f6a09ce40395c65c09fa267ed2dbeba","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.408998Z","times_seen":5056,"resource_available":true,"data":null}},"time_used":2428,"timings":{"blocked":1006,"dns":0,"connect":0,"send":0,"wait":408,"receive":1014,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/wp.png?ver=1715931512","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/wp.png?ver=1715931512 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:26:41 GMT\r\netag: \"66470978-818\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:41 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 2072\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 55, 8-bit colormap, non-interlaced","md5":"8a1ee57c7cdd70950f6a07db248eb66d","sha1":"d2bfc57979cc20255e97473af9e114261c982805","sha256":"cd2c3ef87006afe390412653d335e798c0b9af231cf97fb1f7a78464293a9ee6","sha512":"3f9ba516b949db090d05c2f512a55a3b40ee4bd7ee617deef331d155456fc443c0883ce82dc1b9bcaa66a87f775bfcb23d5fbe4746137a046b65eb1e1911b155","ssdeep":"","tlshash":"2e41d753460f309a46a9157a4ece82694bab1506851cb1cffe44f542bcfb833cf505ba","first_seen":"2024-12-10T13:14:37.131755Z","last_seen":"2026-02-04T23:57:24.511103Z","times_seen":437,"resource_available":false,"data":null}},"time_used":1686,"timings":{"blocked":1081,"dns":0,"connect":0,"send":0,"wait":407,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8610.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8610.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4897\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 18583\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"3c68a47b683489a072e6468540c9b0e1","sha1":"b3152127cc8c9469a61473a7b7d44989689bb897","sha256":"104969db8e065fdf85cb9349574bca5eea1ccd06d2a4ca9e57baa68d0ce29650","sha512":"ccd566adc85dd6da61c91db92e1c7eacc3426fa2262e1ab2df2c5e748682d47cff4cd83c4744ac2a8faa72501f1a1f8fafecd82b97a8c2a87d32760be832f2a5","ssdeep":"384:L6+hA/w+My0l3WsghRWlhmi56dWKOuLrR67yAm+BCeyWGTvGZHyYc:e+CGtKhRVFUKRL4OmJjMojc","tlshash":"7782c0755d5a3739dc08b8d41db8b0bb3ca98e0fe4d5f35080d695407ac819a13fed62","first_seen":"2025-01-02T12:35:28.083371Z","last_seen":"2026-02-04T23:57:24.449976Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2043,"timings":{"blocked":1033,"dns":0,"connect":0,"send":0,"wait":809,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/moment.js?ver=1580697220","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/js/custom/moment.js?ver=1580697220 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"5e378684-1f30d\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 127757\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127757,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e70edb526ff09f426618efade93a4782","sha1":"840b05449d3851118fc835592bd98af885bdbf1f","sha256":"ab513aa4626ba224ac61b747674e6aead965f6e2cf87a2e60c7d4645b519817f","sha512":"943192c03e09b13bbdee324fda4c81d019b4cb5178596b5c548a1e6776022aded289a6076d32d5f55f99316b57b6f7db13c6429edb3a1e6927e7bcea89774cd9","ssdeep":"1536:/cZlnfxbjbJzvdvpeG2iMuz/M6z4QZFSNwmJaxxKZ5dFR79LNOf0uK:/cZlntbEG2i8umYx620uK","tlshash":"cfc3508a69476123467267398f9f4509ff6985330a0e8605bc9d92d83f71c6c43bafec","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.419416Z","times_seen":5116,"resource_available":true,"data":null}},"time_used":2437,"timings":{"blocked":1000,"dns":0,"connect":0,"send":0,"wait":405,"receive":1032,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/hl.png?ver=1688486645","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/hl.png?ver=1688486645 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:26:41 GMT\r\netag: \"64a442f5-85d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:41 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 2141\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 55, 8-bit colormap, non-interlaced","md5":"213c5e560fa58163ef4c9fbaa827cbee","sha1":"7f97a26478a86ba60406ee4541911b426b321e3a","sha256":"1020793a1309f602ce5d73193666b1ffd47372200f662f0090e461f9a0026a1f","sha512":"bcba010847f2463ff1190c41336e2e4b76164f2a63d23dbdc3c23ae263952ad98c90983478fb9e33ecf71270a2eb0c9e1d0533a736604d0a71dd9cb0cdf5398a","ssdeep":"","tlshash":"ea410a9271c8cc6a55260a78d7d440ae10b84d0dd72af4114782bfc6493212fdfd1b91","first_seen":"2024-12-10T13:14:37.136268Z","last_seen":"2026-02-04T23:57:24.473262Z","times_seen":437,"resource_available":false,"data":null}},"time_used":2304,"timings":{"blocked":1072,"dns":0,"connect":0,"send":0,"wait":1230,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/js/sweetalert.min.js?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/js/sweetalert.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:06 GMT\r\netag: \"5f412ba9-4262\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 16994\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16994,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16994), with no line terminators","md5":"2f9966a615f3f46d846807adbe42644f","sha1":"441544c084828da55ca0bafdc4c3df7dc7020820","sha256":"be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c","sha512":"e85f14552c1b5837780990e210223c5d6f532dd55f16589f682d1f2f95acc540b715aaac23ce12f871661006f80ec9043a9674dfdec1c3efc0819125d492dff6","ssdeep":"384:Rigwo5UpVZG9lOUlgkhzj7FRNE82XyySyTYayWri/SRVRXFKP9nWZcT2Rc8ex51f:RiB8lOuR5wSWrrRVR1KP9WK6Rc8ex/","tlshash":"ad72c899325438b327e361f1009f504ba4b196bde8095861376cc9e62ff8cc95ae2f77","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-07-25T02:29:56.422556Z","times_seen":7195,"resource_available":true,"data":null}},"time_used":2451,"timings":{"blocked":1011,"dns":0,"connect":0,"send":0,"wait":408,"receive":1032,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/footer/en/nav_icons_best.png","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/footer/en/nav_icons_best.png HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.segrft.com/plus/css/common/bet365_style.css?ver=1685497875\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:48:48 GMT\r\netag: \"6475bdaf-ebb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:48:48 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 3771\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 853 x 25, 8-bit/color RGBA, non-interlaced","md5":"2dd8442fff143369cd0cb770b4be820f","sha1":"aa6db3ec675364b9b96186ecc1eff774936892eb","sha256":"ea7904ca28eae289742e79844e68dce77c803a477c9e48240300548955621130","sha512":"0c04c6a0a8db72d6fc855449ceecad3f9881b8744498774706fe6bb9af651a39b08c7f955a59f5d1f55cd5c2e84ff332366d0d8338c64ac847c0ec964862d2b3","ssdeep":"","tlshash":"09710919f8012890ce19e745aae955b61f3357c49a82baa23ccecc035b600fdcc457e7","first_seen":"2024-12-09T18:19:54.395637Z","last_seen":"2026-07-10T11:37:32.037633Z","times_seen":2282,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1768440735","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/unite/login_modal_unite.css?ver=1738950076?v=1768440735 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 6984\r\ndate: Thu, 15 Jan 2026 01:32:19 GMT\r\netag: \"67a645bc-1b48\"\r\nlast-modified: Fri, 07 Feb 2025 17:41:16 GMT\r\nserver: nginx\r\nx-cache: UPDATING\r\ncontent-length: 2001\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6984,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"252c2fa58e6d682ca2b18b0888ebf910","sha1":"511ef6db164e0c745e67941cdb2043aef965dd0e","sha256":"5bca12ef0f6bfba5c12cbdd0eaeeb1d48e05c91149df7743b76b80480317306a","sha512":"1aa311c2f06a767d9eeec9c384f806d2b19977bda91af36a6aff9443896e677a3e488974b64c0e7c3e6a07cf77c834e6d115a8388b5938f065c5cbeff224c7d7","ssdeep":"192:4ybbQhWJZ4JWpC/+FtCmSCgIUaTgIaxl+F5Dm9qE:tFYd4F5Dm9qE","tlshash":"9de11e0576bf0a63a06e860935ea9b80630f9217c615ef7f7df132448fcd6689139f64","first_seen":"2025-04-11T10:47:55.703801Z","last_seen":"2026-07-25T02:29:56.411523Z","times_seen":4310,"resource_available":false,"data":null}},"time_used":1542,"timings":{"blocked":1138,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/unite/login_unite.css?ver=1614680239","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/unite/login_unite.css?ver=1614680239 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 170\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: \"603e10af-aa\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 155\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5aa3dbf621e04d73e3a023b18dd141bd","sha1":"f35345fc401964592d37688e641b86f9eb3931be","sha256":"dcde9ab25bde6d1827a49457a7ef72e7e177ef141a188e074e23a9136ca2ef66","sha512":"1bdbd3e8c6e1dcd6e4381ac29ad636f9218a8ec0a972ee77c1ed1a4805d7d4bad8d776de93ca554d7f116e9a1f01873d6f1c048ed348873b78b5d3d285e5273f","ssdeep":"","tlshash":"d3c080530c954f57d50786957c9e87029b7e60209e548f1f1c341878da85f2461fd575","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.424448Z","times_seen":5045,"resource_available":false,"data":null}},"time_used":1729,"timings":{"blocked":1122,"dns":0,"connect":0,"send":0,"wait":405,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/fun.png?ver=1685959560","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/fun.png?ver=1685959560 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:26:41 GMT\r\netag: \"647db388-1820\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:42 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 6176\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 55, 8-bit/color RGBA, non-interlaced","md5":"e598278e691bdaa1680c42482c583eaf","sha1":"9d0f3e4b8b1fb2f68f2b0402425f7f3525cb4872","sha256":"801dec93ce534c9d6f09e1616846830dc754ac3c55788f7c28f0f3ce38b7ddde","sha512":"ea9db2a1704812ea537b1ae7eef3a93e3110c04cdf60dce58204ba301c7c38f68e60afec3574fe99b05dbeb5f0fafcd7b23fcde163ba7d2f05725da1e6d12051","ssdeep":"96:OESjknmWIpYf/1i6r14iHYvpTSHXcH3cxs4v95MZRcP5dbPEx76EEGL96lBBG/cY:PSjkndxH4BS3csxg+ze6dwl","tlshash":"0cd17d0bb321f845ab899fba989c638b3a3b4544dac1a4552cc5dc572d300facdb65d3","first_seen":"2024-12-10T13:14:37.133693Z","last_seen":"2026-02-04T23:57:24.420101Z","times_seen":437,"resource_available":false,"data":null}},"time_used":2503,"timings":{"blocked":1080,"dns":0,"connect":0,"send":0,"wait":604,"receive":819,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/footer/footer-logo.png?ver=1600719130","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/footer/footer-logo.png?ver=1600719130 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:19:11 GMT\r\netag: \"5f69091a-2b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:11 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 690\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 19, 8-bit colormap, non-interlaced","md5":"b30ea49a2bcc7479a195bb1fc07bd031","sha1":"a7bbe06838b85840035172fa9a8ee6bd35c1c636","sha256":"08f3d508861fbb6e144807af6719ea78cf9c26e3c99a1cbd12f9d83fe9f0758e","sha512":"ac7f880c76eb7e3701046fc891bb9acc2540548431eff4552c3639dcc08b146f3ff973d050625edfbbe61407c36e36f03080d7380b4cc4cece176ea7cdfc4c3a","ssdeep":"","tlshash":"950162973981e41e91f65836d6a6b4a6a452960509e8c9f2a2db8c3c19204d0ee3e712","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-03-19T07:12:23.011485Z","times_seen":4988,"resource_available":false,"data":null}},"time_used":1835,"timings":{"blocked":1027,"dns":0,"connect":0,"send":0,"wait":806,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images/dc_new.gif?ver=1597629314","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images/dc_new.gif?ver=1597629314 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/gif\r\ndate: Thu, 15 Jan 2026 00:19:12 GMT\r\netag: \"5f39e382-4e3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:12 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1251\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 21 x 12","md5":"25f6274aa9e9e073709978b30cf559c4","sha1":"a7cbd2bfcc634f40df01e0195e2cd666a22a7291","sha256":"243406dc9776577510746308a2816db585b4abd09a64e1c761654316c0d9038c","sha512":"9149b9e16b06d6508ebebbf78a59ad26eb15ff35084c2bb6be8f08795884f4a914e24689fc2402eaae46819efddc37281b7d778c92d2bf66f8939a4ff9f02a86","ssdeep":"","tlshash":"7921570ad842bc40409c54f57af7a9271ba60980c9f4f5d6b4cdd81e56241b96c19bef","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-03-19T07:12:22.987654Z","times_seen":4985,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/header/common/kefu_icon.png","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/header/common/kefu_icon.png HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.segrft.com/plus/css/custom/header_custom.css?ver=1738643282\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:19:12 GMT\r\netag: \"5fc6f20f-246\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:12 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 582\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 16, 8-bit colormap, non-interlaced","md5":"d66100dc3b6143ccaab68587edf59169","sha1":"aec841ed002d6f0572b1bc380212d38be5858728","sha256":"cba9dfe544df0c8b71bb9881e1d77b9be08007df320acfb8398c9b636bc1afc5","sha512":"a5db92a6bb8e2bed2268ba81ebcfbff6564ee50d09ed94c2302cbafb4e234cf9acc99d585568adb0de318e38e790467cf81fcb05643338c7200277a878d04d73","ssdeep":"","tlshash":"abf041ded0770db9f6a8245ae0a20980fd525a1c9ee6534e2a9ce04f08ed0049ab6746","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-25T02:29:56.439847Z","times_seen":5048,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8270.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8270.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-47f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 18420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"acbe296bc89c4207536ecf4943121fb1","sha1":"2d66e59af2a25b2650cda4d7b100111232568355","sha256":"4e733dfe6ae98724a6e522814bb5c333279a3842423665baa20e4715c679372c","sha512":"2ae4745438f7e43d497f17b8134d260f7a4b6007241f76edbd5d9639c93437c1cb9f15d090390562abc81c05778d9c55f882d60b8ec1a433dbe717d41ca2be48","ssdeep":"384:7GEaFiaVUqROJANddDFyg7hP8FWEAPn7cDLk/XzS+rzM6oO+LqIv:iEsTROGNdyWhEtW7CiztiOsv","tlshash":"e082d0b9469d53738638b4ef2f63f737a9f8375ea4291a1100f6701722227099ed9d48","first_seen":"2025-01-02T12:35:28.078158Z","last_seen":"2026-02-04T23:57:24.495439Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2051,"timings":{"blocked":1036,"dns":0,"connect":0,"send":0,"wait":1011,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/footer/footer-18plus.png?ver=1600747939","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/footer/footer-18plus.png?ver=1600747939 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:19:11 GMT\r\netag: \"5f6979a3-1b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:11 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 441\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 4-bit colormap, non-interlaced","md5":"950ceac8f20ad504e908c855fef89833","sha1":"694bdd9709a9bb3be26c6f7bb350205eb44ac7b3","sha256":"e17939202163e612402dbf251414bbb4e5faffdd133fdccd0bf2afd356e0d635","sha512":"07ef639d2d340fe07a2c32c06d67548675b57884e9c89e508cd1abce17dafa0e33bdff120c5c6f41e7fbb9d68f32908e859ed01b0d6f27a1fdb28b040749d289","ssdeep":"","tlshash":"f1f023d3874e9c50f4505f61c66f1a8398b68e0cd0afe906d91073bc283a724b2d36c3","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-25T02:29:56.394586Z","times_seen":5047,"resource_available":false,"data":null}},"time_used":1830,"timings":{"blocked":1023,"dns":0,"connect":0,"send":0,"wait":805,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/css/swiper.min.css?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/css/swiper.min.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: W/\"5f412ba9-4bef\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 3631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19439,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19174)","md5":"319f20c8f06461463f24bfc703551a18","sha1":"f3bc53e03aefc4ee3be3adbcc707f7ed4c1c65a0","sha256":"67b6584af0fff14908d8f05c0eb9d59cb809da113feffd197f3ddb38a779ea45","sha512":"56439e25a232e6f80b79505aa867b341628cdc5818be22d4d83b7dac66d314a3d91f3eb4dcaa6240795c1a5f990322082c2e85e89a9fce6721cacf828cbe2c4a","ssdeep":"192:YxaNv/lSSyJWCj8zfi5o/uDN3eBxwdJ5c:Yxa1/lS0CYfi5o/uOGJ5c","tlshash":"8a92602c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.418201Z","times_seen":5222,"resource_available":false,"data":null}},"time_used":3246,"timings":{"blocked":1209,"dns":596,"connect":208,"send":0,"wait":801,"receive":1,"ssl":422},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx.png?ver=1659683715","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx.png?ver=1659683715 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:26:41 GMT\r\netag: \"62ecc383-6fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:41 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1786\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 55, 8-bit colormap, non-interlaced","md5":"3aa2a88085924453966df036fa9f9777","sha1":"6d46fdf8c2a8a197b10c5fbd60a1f00e72eabdd9","sha256":"f37afc8b83f02f2a4d7a5e5b19bd4ea41f6d3dad3804ffcd57aa4996d6dcbda4","sha512":"cd09aa1d7e74b96ef09d36b6ab0f7100b7501b3ce064f9e54d20db0e21e26e4162dfd97e90c628c1e5824994220612431e6475277afb32a5225651feb8b8ceeb","ssdeep":"","tlshash":"bf312d541640166cff3de67f7732560934fe0f1149455b5e4c0ec079794ea3c01d6c50","first_seen":"2024-12-10T13:14:37.128518Z","last_seen":"2026-02-04T23:57:24.528278Z","times_seen":437,"resource_available":false,"data":null}},"time_used":1693,"timings":{"blocked":1087,"dns":0,"connect":0,"send":0,"wait":407,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/unite/poker_unite.css?ver=1723717848","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/unite/poker_unite.css?ver=1723717848 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 3557\r\ndate: Thu, 15 Jan 2026 01:31:06 GMT\r\netag: \"66bdd8d8-de5\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:06 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1119\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3557,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b2be7f678b8155de30454247c85a58e9","sha1":"63c7a4642d61f4ac74231118dc6939374ac0a0da","sha256":"6bcd51876dd1b8f49f27b7ab6341815b3eea67f2204db876736a0c1da9dec0f4","sha512":"b1173c5bd1204fc91e8cb1be32bf356065e388aefa311707537b05ab1aea55b95d118c2d56341c702e4a4a181e91aef89f62ef11a404431ccb8a27a500f53fed","ssdeep":"","tlshash":"4771f1935663d4893637d1ba2fb62b28431947035e1ee86d3f6174a8cfc618880f33d4","first_seen":"2024-12-10T13:14:37.009311Z","last_seen":"2026-06-19T21:07:01.005107Z","times_seen":444,"resource_available":false,"data":null}},"time_used":3251,"timings":{"blocked":1225,"dns":586,"connect":208,"send":0,"wait":764,"receive":1,"ssl":457},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/custom/prizedraw_pop_custom.css?ver=1663905027","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/custom/prizedraw_pop_custom.css?ver=1663905027 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 18\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: \"632d2d03-12\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 38\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4957b1edbdaab02ae3242ff27d3732b8","sha1":"0fa68da2f11737fdc4d7961a632581c13f7a8577","sha256":"1adeb028e615a654ebf218f188ad6bc841ad3851da01b28dc4af82ea77179108","sha512":"4965ba38ebc9edebf0321e50f78d18cb9562fc234ffaf91715ecc3c9c9842e56a153a3cc9a30d01a234e8be4e0137d35a06dca1dee9b671ce80a4fa10152d485","ssdeep":"","tlshash":"8d7000000002000082308a280802002800a8b0822200888c8880002a302a0020000880","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.423919Z","times_seen":5162,"resource_available":false,"data":null}},"time_used":1561,"timings":{"blocked":1157,"dns":0,"connect":0,"send":0,"wait":403,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/gdcode_1768440735","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet83091.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 17:39:21 GMT","end":"Mon, 16 Feb 2026 17:39:20 GMT"},"fingerprint":{"sha1":"11:CC:96:86:39:6F:13:F3:65:B5:6A:F3:CC:2D:C3:20:45:E6:62:CE","sha256":"8E:00:8F:23:F5:A1:E2:26:C7:79:F2:F7:22:D3:CD:F4:DC:31:5B:E6:DD:D9:26:DE:B4:43:F2:45:61:AC:50:9B"}}},"request":{"raw":"GET /gdcode_1768440735 HTTP/1.1\r\nHost: bet83091.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/poker/186\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilk3MEY0OWt1TEN0dXh6U2ZcL0FcL2YxUT09IiwidmFsdWUiOiJCNEY3YTNlalJqd3NDb0lHdDBNUUptUXNGVlBUNUtcL2RET1NUbjMySEsrWURoSXk5T3hMQml6N25NOGM3XC9pVUtSQmI4WExpWmtBejZYUUxnaERiXC8wUT09IiwibWFjIjoiNGIzZGM2NzhhYzg3NWViN2UxZTYzMGNjOTQ5ZDdhMTFmOTA0Y2I3NmRmYjdlZmVlZDZhZDc0ZWIzOWU3MTU1NSJ9; vanguard_session=eyJpdiI6Ijl0aEhEMDhhMG9qelwvWWhuaVNhYkZRPT0iLCJ2YWx1ZSI6IjRvdWJLTzJzeFR4djlWV0psNHMxaW5tNmhmWEZKQmYzWHpRcWZocWhlSEp4aEpnR2tqZDYxZFJGWlUwVENPbFB1YnFTNVFPbjlUVnVLSWhtQmF6V1J3PT0iLCJtYWMiOiI2OWYwNjZiNjE4YTNiNTM3ZGNhNjQxODQ0NTIwNTA3MGMyOTVjY2JmM2QzZjc0ZTg2OGUzM2ZhYTRkOTc4ODZlIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 15 Jan 2026 01:32:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1207\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: max-age=315360000\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nPragma: no-cache\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Ik1PTUhuTUpLOWc1WkN3MmVMNEVRNHc9PSIsInZhbHVlIjoiUm95eTVNYkV4aHVHNXBja3FWblZZRklUY0FnbHBZVHFJUVd3M0RyMElWa1ZBcnJYR0V1OThYclpKOVBvYThoSXlpd0M5d2l1OTEzU2MxU3hvbEZSMFE9PSIsIm1hYyI6IjM3YjhjNWUyMzYxMzc2YTU2Y2JkMTU2MmNkZmI4YTJmZDI1ZGUyYjFhMmExYmFmOTk3OWM3MzkyZGQ2Y2MyZTcifQ%3D%3D; expires=Thu, 15-Jan-2026 03:32:20 GMT; Max-Age=7200; path=/; secure; samesite=none\nvanguard_session=eyJpdiI6Ingwb1Nvc2VKMTg3eU5lbFhcL0pmdmN3PT0iLCJ2YWx1ZSI6IlNGd2dWQkZVanFKRFNuZHlcLzRaTk9tU3o3UmdsaXcwUEthQml4blpEbXl4dVZcL1pDZTM1WUk0NjVOYTNINGIrdmxXTDdDTUN5d1BzUkY0bFk4NStOWWc9PSIsIm1hYyI6Ijg5M2I5ZmJjYTkwOWJhZjY5OGUwNjNiNTk2NTc3YzdmODA4N2U1NGViODBjMWYzZGRlNzM3OGMzYzhlYWVmMTcifQ%3D%3D; expires=Thu, 15-Jan-2026 03:32:20 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 56x23, components 3","md5":"b248c833e4b9666146a9bc707fe21141","sha1":"d78c32606708cb41774ecb339e018cecf5515de7","sha256":"d7194564a45a80637d59fd80fa30655ee464171dc5b67661bfc7c1fb5771f9b0","sha512":"195d489616b5b40b2cbc48bf362bbab1d719f90c333f7cd5052bfbf1facb88804353a6bd4538f04d316d3d32c023b42ffb351e503ce84f39baf9e379a21e1b2d","ssdeep":"","tlshash":"a121c69fdb178304df1380bea6173db3d28a2d4236607a345ab44674c5a0cfc8009b4d","first_seen":"2026-01-15T01:32:44.570282Z","last_seen":"2026-01-15T01:32:44.570282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2410,"timings":{"blocked":1907,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-15","alert":"Phishing Block","trigger":"bet83091.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/2040.png?ver=1677641599","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/2040.png?ver=1677641599 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63fec77f-5d8c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 23948\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"6626c775e89d4d5492641cac7c988508","sha1":"9ecc2df403251088e3e0e2773f3256712ac6acec","sha256":"564e411aa01f35ab435e79a0a9724d5b369e190823f67d846a6f9c2ea97d9834","sha512":"8b848cde36bbfae7eda8f2f53fe5529e6df20fa293105bb7655839d18c0ee96f4a6f0351059297c97592d9be3e9796eafe2186a507e4baf5c24bc985c7635488","ssdeep":"384:REC7mfjp/7sh6gfA1oeBeOUxDXmOS5p4M6C12BZkZYHXYhyP05/OHiRYzw:y2OjZ7Fg24FmOyGEC70gsY8","tlshash":"95b2e1913c415e9e49d22a7f23b54cc171c82ea445ffa9ce4c67feb61f466110b93264","first_seen":"2025-01-02T12:35:28.089988Z","last_seen":"2026-02-04T23:57:24.481811Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2034,"timings":{"blocked":1030,"dns":0,"connect":0,"send":0,"wait":807,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images_plus/footer/footer-gibraltar.png?ver=1600747940","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images_plus/footer/footer-gibraltar.png?ver=1600747940 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:19:11 GMT\r\netag: \"5f6979a4-268\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:11 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 616\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 32, 8-bit colormap, non-interlaced","md5":"d78068aa4f691e86a736d5ec0fa45aee","sha1":"30e0842662a7f97b84289fb093c3755b99503e40","sha256":"12d00217bbf0ba6959f43b8ad1f5bbd0b9f7b63ecd6be5650bc91aef21716097","sha512":"a0f5aa3f4c004a5ba147fa4fbe283d1e06448deed3f11112d8700e6c3ac85b67868962e75d406dfea5a416f3c69c7d43ee5444e7e7db242c7c5dcdeff94841cc","ssdeep":"","tlshash":"f5f002d24bc2acbc90a6d925ab2c97a9e5c911245623ef3d91a4e018f447260a4d5786","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-03-19T07:12:22.987164Z","times_seen":4988,"resource_available":false,"data":null}},"time_used":1830,"timings":{"blocked":1024,"dns":0,"connect":0,"send":0,"wait":805,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/custom/header_custom.css?ver=1738643282","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/custom/header_custom.css?ver=1738643282 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 6702\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: \"67a19752-1a2e\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 2028\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9bb336c25275a44be055593cee547e55","sha1":"881e45a4d3bfc4ff6e3eb29bd7dad13fef00cbb3","sha256":"f093c1ff1c5576fe70b99542fa3ec95459e2353380574e6b3b9621d4d0d5e310","sha512":"94d669998c59ce5b10a47738e1b6ac68c54a590afe0ed793c08d57f2dbd4e334d8586dc9d76e0704adbdc2bf01689c681453a796605f716a56f8072934c40674","ssdeep":"96:585UOKrCo+wyCWiV9PR6FS5+j60XF1RnfgE6Gvg1CFcSk6yx2/kK5wN0DzMaZ:6oNRRrPIFW+j60XXFcdbLCvMaZ","tlshash":"a5d174c167e16448b526c5f2bc616a68635f6052c40fdd2cf3f8246cddee1c6a376368","first_seen":"2025-02-06T13:25:38.25631Z","last_seen":"2026-07-25T02:29:56.424942Z","times_seen":2897,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":1116,"dns":0,"connect":0,"send":0,"wait":406,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/cms/cms_1081.png?ver=1612879623","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/cms/cms_1081.png?ver=1612879623 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:19:11 GMT\r\netag: \"60229707-8c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:19:11 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 2248\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 254, 8-bit colormap, non-interlaced","md5":"9db7b51805575c39ee9f39665b0f7ab4","sha1":"f1a2bf9f5d5796a06122c20077563d17c016f626","sha256":"0c267456e5c0f717c238b3b41418e9745826d8854f9113e2f504ba9a4df28c95","sha512":"0cfe64e0d430e69c834a7c9f837c0ea4efd518898fb3b1ba748ab55edb6a2496b3676d5062815e1d401aaaa70f9f14b17867392510dd47f262cae2ac7d8591e7","ssdeep":"","tlshash":"85411bd8bcd30fced4e91000a1e99b418776203795ed0092ab4aa4133bc19fe1639765","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-02-02T09:08:19.822977Z","times_seen":3243,"resource_available":false,"data":null}},"time_used":1715,"timings":{"blocked":1105,"dns":0,"connect":0,"send":0,"wait":405,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/830.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/830.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4eae\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 20142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"ca799104c2a5b0bedd764685bfe83956","sha1":"9f7964c7eb36cb02ab1eaa4a4abf2b89178ed88b","sha256":"1f642168b6351e9daa6409bb8addb06a6fdf1cd999dcf78dc58196adb4e885e9","sha512":"d33e60c7cbe766d092dc6e00200757898157faa9ce9576e9e5fe4e56ac6ac885b3b8ca3fd48ef646c97247fc6dbee8fba40f786e5c8782b3c56cd59c6e3415d7","ssdeep":"384:qwN2nnrcQqzgPGcC4LUxjqk/CJWduS+ZUWdgpXmiCGJu8Ce5JH:T2rcQzP914jTfdkZUvYGk8/H","tlshash":"4e92d0829df36a5eeb41395c35cca045a0289dfd6dd17b22b584ae12cda0a58c68f9f0","first_seen":"2025-01-02T12:35:28.027908Z","last_seen":"2026-02-04T23:57:24.512341Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2297,"timings":{"blocked":1066,"dns":0,"connect":0,"send":0,"wait":1228,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8620.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8620.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4b27\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 19239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"c4896f64f804d22c69c73993883bb6ff","sha1":"972893a2e900fa2b0a65cf39dca9e05725c4cdbe","sha256":"e720aedab16a9bf1f95d94c5b577cbd06e1fcaaef4f25a96bf22677188d1383f","sha512":"195daaa8928b43a2001d04df7c4c12cab019eef7a4998d029fa0c4f459686621ff70a13bf7e4770d741c22bb070f4eb3f7a6073d279c5079912a48a46e3ec9f6","ssdeep":"384:i0VfmqDfQ1Zkd6z7USguFPms2DcYDRLipt7gwvGgWrKP5T9yuabT:i0V381WdMPYbst7xEKP19yuabT","tlshash":"dc82e09c6cc27959e234e573d73f69a8e231cb308fa7094a077b0dd7429bfe1a012912","first_seen":"2025-01-02T12:35:28.08511Z","last_seen":"2026-02-04T23:57:24.379179Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2041,"timings":{"blocked":1031,"dns":0,"connect":0,"send":0,"wait":808,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/2011.png?ver=1760257124","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/2011.png?ver=1760257124 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"68eb6464-750c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 29964\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29964,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"38a4dcc88f2802e1d987e483120d1e1e","sha1":"4c82719ad2b2ee5add6f6f4002d2a457de6b38ae","sha256":"a7a8454585c3c679fecc6d5d499d5a498a54bcaf685a6c841960028c06b63e77","sha512":"d072b549c4e78516cf204855b58f584ce3070aceb6c79f06e0e93cc678a14e224ba2ec81a062202547c8c8e4e206706f04a93e3ffb26474bda05a89ff5f09e5a","ssdeep":"768:IaxbUcWcR6gFwjAQzWL6QiKQpQDx/IC9jeVnKn:DbUFu6dAQzWLqNpQDx/ICwVnKn","tlshash":"39d2e1212b02171eac939beada26093f4580f0cfe9b7738ce3869751b25a44605fd06b","first_seen":"2025-10-27T17:15:51.450092Z","last_seen":"2026-02-04T23:57:24.529107Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1842,"timings":{"blocked":1028,"dns":0,"connect":0,"send":0,"wait":807,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet83091.com/poker/186","fqdn":"bet83091.com","domain":"bet83091.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-15T01:32:14.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet83091.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 17:39:21 GMT","end":"Mon, 16 Feb 2026 17:39:20 GMT"},"fingerprint":{"sha1":"11:CC:96:86:39:6F:13:F3:65:B5:6A:F3:CC:2D:C3:20:45:E6:62:CE","sha256":"8E:00:8F:23:F5:A1:E2:26:C7:79:F2:F7:22:D3:CD:F4:DC:31:5B:E6:DD:D9:26:DE:B4:43:F2:45:61:AC:50:9B"}}},"request":{"raw":"GET /poker/186 HTTP/1.1\r\nHost: bet83091.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 15 Jan 2026 01:32:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: no-cache, private\r\nContent-Encoding: gzip\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Ilk3MEY0OWt1TEN0dXh6U2ZcL0FcL2YxUT09IiwidmFsdWUiOiJCNEY3YTNlalJqd3NDb0lHdDBNUUptUXNGVlBUNUtcL2RET1NUbjMySEsrWURoSXk5T3hMQml6N25NOGM3XC9pVUtSQmI4WExpWmtBejZYUUxnaERiXC8wUT09IiwibWFjIjoiNGIzZGM2NzhhYzg3NWViN2UxZTYzMGNjOTQ5ZDdhMTFmOTA0Y2I3NmRmYjdlZmVlZDZhZDc0ZWIzOWU3MTU1NSJ9; expires=Thu, 15-Jan-2026 03:32:15 GMT; Max-Age=7200; path=/; secure; samesite=none\nvanguard_session=eyJpdiI6Ijl0aEhEMDhhMG9qelwvWWhuaVNhYkZRPT0iLCJ2YWx1ZSI6IjRvdWJLTzJzeFR4djlWV0psNHMxaW5tNmhmWEZKQmYzWHpRcWZocWhlSEp4aEpnR2tqZDYxZFJGWlUwVENPbFB1YnFTNVFPbjlUVnVLSWhtQmF6V1J3PT0iLCJtYWMiOiI2OWYwNjZiNjE4YTNiNTM3ZGNhNjQxODQ0NTIwNTA3MGMyOTVjY2JmM2QzZjc0ZTg2OGUzM2ZhYTRkOTc4ODZlIn0%3D; expires=Thu, 15-Jan-2026 03:32:15 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nX-Bos: b83\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136407,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"7a137cbe197a6146a75658019c2ed9cf","sha1":"96a90c5f58903900d37efb5b4d77acf524bafc02","sha256":"02533a3f7156a354267c54c4b6d1f85413f0e293ca26ef176b7cdf242ea2615a","sha512":"546b352a682ee2e8bf67422a465ac8293fb3750f0dd0afd04154b07fc62f7438194276adc5b9067d07d157f1a6222f26e33002e63eb8418ba1b5e6e86103bb67","ssdeep":"3072:zcNoouchCEPHhoysGVEJU4HJ7nq+g7097BALRs1fGma:zc+cl/2ysGVEakFe70HAW1f3a","tlshash":"a5d312a05ab3dab0762501347edebe6c924ba5cec10c7af77f0973d4960bd4f9261061","first_seen":"2026-01-15T01:32:44.575458Z","last_seen":"2026-01-15T01:32:44.575458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3423,"timings":{"blocked":662,"dns":27,"connect":315,"send":0,"wait":1454,"receive":638,"ssl":323},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-15","alert":"Sinkholed","trigger":"bet83091.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-15","alert":"Phishing Block","trigger":"bet83091.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/css/sweetalert.css?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/css/sweetalert.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: W/\"5f412ba9-59ad\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22957,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d8cc26070373f41241f37ce5a9c9d885","sha1":"3ecb6f91187c0153724c950efcea0b0d944fd5aa","sha256":"460df149ba9d2eb000637d9bfb2df51c5080a19e9071ff4ed5a4b7e21a0bd2f1","sha512":"a10fd7b306bbe186c50c35066e45fb6491741c8ab161d6e8447069aa919e943b00768a3b65180195d68f6f2b7f4195035247d0b9115e5a758189a60bc1c04533","ssdeep":"384:MrFKaS31F8FkfZ6vFyFiFz2FFF01GF7xGxTxGxJwdD3qX1YtiemnEzpazAP:MrFKaS31eFkR6vFyFiFyFFFhxGxTxGxe","tlshash":"5ca223eb1de31284a727874553de4b2827384043a81bdcad77cd519ecf81eec21dab56","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T03:46:39.224772Z","times_seen":5515,"resource_available":false,"data":null}},"time_used":2669,"timings":{"blocked":1229,"dns":609,"connect":203,"send":0,"wait":204,"receive":0,"ssl":421},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/css/custom/login_modal_custom.css?ver=1726650059?v=1768440735","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/css/custom/login_modal_custom.css?ver=1726650059?v=1768440735 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncteonnt-length: 2491\r\ndate: Thu, 15 Jan 2026 01:32:19 GMT\r\netag: \"66ea96cb-9bb\"\r\nlast-modified: Wed, 18 Sep 2024 09:00:59 GMT\r\nserver: nginx\r\nx-cache: UPDATING\r\ncontent-length: 772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2491,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"1c9324c073c8d8db7f32df740feceace","sha1":"5465a38fe6f669c4df9a2265a654c0815bb7373a","sha256":"79ecbd9aa7b6311f29cda59980feac8ac8263131b8089580f60f4ad6188f86ce","sha512":"2dd2e0b5645e119bcb2357c489d55fc76cedb95e19750489a32bb0974cfc1e974db62c06ee1f3b738114c3310776c73f59ad69149348a1701ea87d21efe3544d","ssdeep":"","tlshash":"215147026ebf2e93908c406d35de4e84225d400bc569ee2e3ff723648f5a6a6a177f04","first_seen":"2024-09-19T13:36:38Z","last_seen":"2026-07-25T02:29:56.441048Z","times_seen":2982,"resource_available":false,"data":null}},"time_used":1945,"timings":{"blocked":1134,"dns":0,"connect":0,"send":0,"wait":810,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/8200.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/8200.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4d33\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 19763\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19763,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"6545ba56c821f9c6b22a9148cec9510f","sha1":"dd047cef99d9300c22b64d323815108aa5b7ac3e","sha256":"e761abe6bd71f1285acf256e3469367bf3b4826d713e4533e35aa5435e398f6f","sha512":"6584eb89a20bf67878808925ff02bca816af9abfb62ce73fd259c7825717015642e8a04ec40fd1a48d5a431976ba91105126944500933ddd1b6b9aa6371f418d","ssdeep":"384:PEVvcY00QTXDUyiCNKW+DM+I58JhzH/8HGeIrT9+VLs1y/F7pKLLO:sVvUU1tBU83HkTq9IDKy","tlshash":"1292d02372d50ab20e8770be9f3e747597bc3567db0a6da1d66a26b058f0005d8ec893","first_seen":"2025-01-02T12:35:28.066588Z","last_seen":"2026-02-04T23:57:24.389949Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2260,"timings":{"blocked":1042,"dns":0,"connect":0,"send":0,"wait":1018,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/js/custom/checkinput.js?ver=1598008226","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/js/custom/checkinput.js?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Thu, 15 Jan 2026 01:31:07 GMT\r\netag: \"5f3faba2-3c14\"\r\nlast-modified: Thu, 15 Jan 2026 01:31:07 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 15380\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1701a1c0e116f99b046f95c9f2f4ef5a","sha1":"c0ea303e6c96847ed6bb4c72afd3a84332ab5b3a","sha256":"5a053d48644953a4dbc5f0cb73d4723dd958c9b5574be9cdaac4bccf21d9f38b","sha512":"131b0b96f085bbabf04eac826013f7a62402bfe7e8aa4f6830ac9bdd4d629e4062a687b03a14d6c02d8ea741aea17fe4646da4c054c1954454025fa22f0fd307","ssdeep":"96:ZRORCQC5WCPCD9CQCwCGCkCmCQC+MiCwCdCuuCkCbmCd9P/ddPojcHoujp1SPZaQ:ZRRRvJdlANu91diXdT59j6IQNHYerS","tlshash":"9d62204de0983ea6857333750e7f5200f57906278525eb08be9c59b42fbe80a4b63f5a","first_seen":"2023-04-15T09:13:23Z","last_seen":"2026-07-25T02:29:56.410916Z","times_seen":5057,"resource_available":true,"data":null}},"time_used":2454,"timings":{"blocked":1013,"dns":0,"connect":0,"send":0,"wait":407,"receive":1034,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/220.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/220.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-3d76\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 15734\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"439b92f792cf602b55169104677b0d8b","sha1":"67d10ec0971ccb76618424dc0395c680ed1ca40a","sha256":"991fd48793f27c1ddd9977f1f329dfc08e7781fddeadb2932247ca76d9ea514e","sha512":"a289c0569788a5547f36f357e5e3b0e7fc0e334eee59b2a7f08714233cc1718fc1b42cc765096d051fd47a0e87f4011f7aff70530658dad535ef0b67ee563e8d","ssdeep":"384:NodV52MGDk6c/7OFAc5M6JCVWIlI/Fx7R:NC59H/7OJr409R","tlshash":"5562d0c967c6c522a9d7ec2031cba4cdcdf168b0ac3546addb278d01a5ca135b7b85ce","first_seen":"2025-01-02T12:35:28.030969Z","last_seen":"2026-02-04T23:57:24.421004Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2295,"timings":{"blocked":1065,"dns":0,"connect":0,"send":0,"wait":1228,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/600.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/600.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4582\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 17794\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"a09cb7bdc62f2b41c58484f9ade34d6e","sha1":"1070b0b32d2b34ab8d85c67808cc5dcabafdedab","sha256":"10b976248e131728868ab7d16d5104e3d0b63ab0f4365d7fc80aaa3c560ea15d","sha512":"7148d1269ec5836cd1dfaf35df6ac8d54623f6cb8a72a5a0eefce9b1e7940687f41ec5ef4cab927dcb52ad14a837f1979f07327f17a4555fbe2bb57e03b3c792","ssdeep":"384:pnsepUDYd0nTr1+F2fHSvjLBK1zkeSAB5ye1+Vgs14usMsWWjiLctjB:pBeJn1+F26vpK1zgAB5R+iq41MssCB","tlshash":"5182d02e26ff53dafde8fb90f10120a48b4a925de7f130046b5ac7bd345add64898423","first_seen":"2025-01-02T12:35:28.037299Z","last_seen":"2026-02-04T23:57:24.415528Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2290,"timings":{"blocked":1060,"dns":0,"connect":0,"send":0,"wait":1221,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/main_bg.jpg","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/main_bg.jpg HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.segrft.com/plus/css/unite/poker_unite.css?ver=1723717848\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/jpeg\r\ndate: Thu, 15 Jan 2026 00:26:43 GMT\r\netag: \"62ecc383-1cf5a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:43 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 118618\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118618,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x970, components 3","md5":"4cd238baf4064b075c291b619092c7c2","sha1":"bc96ca7cc3922855a75636ed504f298178cde3e0","sha256":"ea6e0c63ab7b25a4c956de2bdd76ddaaffef23ba76c5035df03bef17a344b73d","sha512":"3b07c7dbc124cb5a35c7a0dfd15031ac56ab4dfc837f826079570a56e30b1f0b958cfd97f23f8320e59fb0861055a44a87c9bd410b0d08dc66ec70f86a9b4bb6","ssdeep":"1536:YnxeRM7VVvMc2gsTygpCLdT8NL+/e+tI4e9cyWhedLwft/djQnv7RTniNvs3V8ci:+eI/MBCLde+/hyHyfdqv8KOckw0yOvZV","tlshash":"fac3128247c28dc7e2a955790acd426b7f43ab59973c41cb0681e98b0cc669dacd7f13","first_seen":"2024-12-10T13:14:37.067284Z","last_seen":"2026-06-19T21:07:01.018935Z","times_seen":443,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/images/en/dc_new_02.png?ver=1685675660","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /images/en/dc_new_02.png?ver=1685675660 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:26:43 GMT\r\netag: \"64795e8c-5dd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:43 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1501\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 47, 8-bit colormap, non-interlaced","md5":"c6f8f80660ba1c822f91ed8344fd700c","sha1":"c7e2efeeeaef33892e5f64be8dcbbfeaf926d12a","sha256":"1791a8c122c019780de713b2c28ae68f99dbd31f03337754101635f7557b29b5","sha512":"47ba150cef4aa9b1b61d98d173fc3fb90ee2395b0ae06e9a2221f573c8db3bae2df0d702aeffefd9decc6606f931ffe9016578bb8a96e5b39ce102547e5c8b56","ssdeep":"","tlshash":"2331dac421731cb4f01ed65c5b5966810c341d60b9ffaa542d6bfb54611e30426879d4","first_seen":"2024-11-30T11:32:18.230686Z","last_seen":"2026-03-04T08:07:04.832632Z","times_seen":655,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/poker_bg.png","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:20.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/poker_bg.png HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.segrft.com/plus/css/unite/poker_unite.css?ver=1723717848\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:26:43 GMT\r\netag: \"62ecc383-8ac\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:43 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 2220\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 285 x 352, 4-bit colormap, non-interlaced","md5":"c1f7242faa64eb34bbca002440007f22","sha1":"4e04784c464a1dade225a9083c8e666b1eb6e332","sha256":"ddaa4b40261600eb5d641a33cce3ab9a843282d3a89230d662e90653eacdf902","sha512":"b31fb89033dcc0b130d65a793e229914e0f88de2ea0a14faa46bb1d9e5502cc9ddc7d010a02e5c879924279f5acc1de73044486bdd7d8fdbccf545fe75cb09d2","ssdeep":"","tlshash":"2f415adfc074abb7ca12327b25a40d6cc04dbef2bc1212d88442f58b09f56e320da927","first_seen":"2024-12-10T13:14:37.069697Z","last_seen":"2026-06-19T21:07:00.93296Z","times_seen":443,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kaiyuan.png?ver=1659683715","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kaiyuan.png?ver=1659683715 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:26:41 GMT\r\netag: \"62ecc383-16d9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:26:42 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 5849\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 55, 8-bit/color RGBA, non-interlaced","md5":"b3abf434f8dad2dee8700af20cac3ec3","sha1":"c1cc48fe2fb9c612a2719923be02015e09562160","sha256":"e2714065e0a416cfebd381b7af7145b39601775d9203366955ecd547f0d4a08e","sha512":"4125c8f409576229cca53bc4c2b78e66a24e6d95ab33ecd67f555d68b85e23c753005117719f52b9a3cdf83d8a595c4c10768a5d4719039c0b09d8aa6f06d27d","ssdeep":"96:gQ8wNiSSZFS4ldJQxt+N8A3MWqDGU7zgNPf+eYpl0EHjLU4HaLiiCIJZkb5i0V:gCSZFFnJQxg8jDGUYlWrb36LrCcig0V","tlshash":"d3c19e9e9590ad51f394e360d4f7e0038c96c78a99c0985ee49c84118f2538789de3e3","first_seen":"2024-12-10T13:14:37.12702Z","last_seen":"2026-02-04T23:57:24.505015Z","times_seen":437,"resource_available":false,"data":null}},"time_used":2350,"timings":{"blocked":1093,"dns":0,"connect":0,"send":0,"wait":406,"receive":851,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/720.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/720.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-4795\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 18325\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"795a61f41df54bfcb863921ea81c449f","sha1":"57c003881c7ce1f01c2757d5df8731a2a0924b59","sha256":"957233e3abdad62561ce876672626d3ff4e15e3248e125259a3df6130ea71efd","sha512":"5988cb0c658308deed4ecd0df47c95f270ea8e9df2b7db03e50b3d44459b90959bde477727b12efd2f28c270a8cc58a8ddaf1ba02710f1387b05ff9a02569cd0","ssdeep":"384:cy4HQkus7cnd6oA+O2CW2oi6juPhDr/eMo19RUbUt:v4HMsCd6oAPxJTDbSKUt","tlshash":"3882d0e5a5c4c0ec5236e93ed3ca3e58bf1dd2cbc50399623b525817061cba32dd0a8e","first_seen":"2025-01-02T12:35:28.025648Z","last_seen":"2026-02-04T23:57:24.40302Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2299,"timings":{"blocked":1068,"dns":0,"connect":0,"send":0,"wait":1228,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/common/storage/game/pvp/kx/910.png?ver=1675320767","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /common/storage/game/pvp/kx/910.png?ver=1675320767 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Thu, 15 Jan 2026 00:10:30 GMT\r\netag: \"63db5dbf-3d99\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 15 Jan 2026 00:10:30 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 15769\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"250b9ea100b16687074903a77253de7c","sha1":"c0c6e3b20c4ebffb56369ebd8ed6ffc46ecf82b6","sha256":"dfdf5ebf7cb2bcf338e3b7f9c8af2ed8e8d58d5ac482218c746dd8e7bab92618","sha512":"0058eb3f5069a4d9b664e703b837deedd32fce70e52ed73eb73c22661cb1b7895f9820f09d6301b3c2edc3adf5391fc3eb9146ac3d0e412ea0bf532406a5e0ed","ssdeep":"384:Y7f6V7IfguCiwfbHgVYL47GZIrlKtLcc0fFU6sE:Y7CV7IfguUHgVYLhWrloLccAuJE","tlshash":"e662c0ee620ec6122dfd58e82f2f16f1686998f5c1932e44555f4c92d81fb08f0c7b61","first_seen":"2025-01-02T12:35:28.050886Z","last_seen":"2026-02-04T23:57:24.397991Z","times_seen":106,"resource_available":false,"data":null}},"time_used":2275,"timings":{"blocked":1053,"dns":0,"connect":0,"send":0,"wait":1218,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.segrft.com/plus/plugin/css/jquery-ui.min.css?ver=1598106537","fqdn":"3f38sfb.segrft.com","domain":"segrft.com","tld":"com"},"ip":{"addr":"104.208.79.124","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet83091.com/poker/186","date":"2026-01-15T01:32:17.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segrft.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 20 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B","sha256":"0E:78:85:1F:49:AC:D7:B0:73:F1:64:E9:08:FF:92:3C:BA:CC:99:F9:F7:AA:E1:B3:69:81:8E:82:D1:AE:5D:51"}}},"request":{"raw":"GET /plus/plugin/css/jquery-ui.min.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.segrft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet83091.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 15 Jan 2026 01:30:29 GMT\r\netag: W/\"5f412ba9-7d4c\"\r\nlast-modified: Thu, 15 Jan 2026 01:30:29 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32076,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29137)","md5":"0b5729a931d113be34b6fac13bcf5b29","sha1":"88ba90d2d2944315afd28a706ee5715ed980c634","sha256":"ac1c8f94750b39b12327a5d0c56fdf946dabfb6d91e5d2a202879ff9a5d67e29","sha512":"68e1b473a9cf3731a4fb9ce3c3225aa1152009d3ab7d20e198c203daee3e388b25af41a3a4b2a8ed79b4028df19a93384fc026228b9192ac23d67add56c2ca11","ssdeep":"384:pCwiEt7lcR8lOXHc11evBMzymUh+4C6G/zDcSc7nfZBhVi:slEtiXHcEBMznURC6G/zD8BhA","tlshash":"ade25330a5c2242dfe33c23060e11ef4523bc146eda65fbda09af65953ea8e4c47b971","first_seen":"2023-03-10T04:06:13Z","last_seen":"2026-07-25T16:35:45.548277Z","times_seen":11826,"resource_available":false,"data":null}},"time_used":3292,"timings":{"blocked":1251,"dns":602,"connect":205,"send":0,"wait":769,"receive":0,"ssl":457},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}