{"report_id":"347e2aaf-df2e-424d-aa6f-cf1897d066c8","version":6,"status":"done","tags":[],"date":"2026-06-02T08:59:28Z","url":{"schema":"http","addr":"manbetx-secure.com","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"manbetx-secure.com/","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"title":"万博体育官网 - 万博体育APP下载 - MANBETX SPORTS","dom":{"size":20416,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15998), with no line terminators","md5":"9f3fbebdc2981669158fff2747ad3f72","sha1":"3ae7fba1274cb9e3a5caf425f3df01cc30bc0119","sha256":"dfca5266872e32e8bb1b842205ace619314fcf37e7ed03c3a7a8967ab16b9e79","sha512":"0f4159b6e66e4d890abcd2fd62ed91a7bf9b675f4c4aae3550685fb4f7b49522aeb0f66b6296eb9f3f4a637c629b21a92a328013637e7a1f01afee3b2717f6e6","ssdeep":"192:1AenPHOCkwZ3Z5VERwkye71OYL4PLwS0ZwuAYqgClcCQFn4Z++p7nv:1P0q3Z5nkye71OYs8S2agbC849Fv","tlshash":"8292e733729174ab01a786edb23c778e62fbd14dca778a5963f78bc96bc0d90854014d","dom_hash":"domhash3dfd104744536e033c48ca4134e18243","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"manbetx-secure.com","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-07T08:59:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"gostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"manbetx-secure.com","ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-06-02T08:58:53.17321Z","last_seen":"2026-06-02T08:58:53.17321Z","alert_count":0,"request_count":20,"received_data":1381745,"sent_data":9277,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"gostat.com","ip":{"addr":"45.58.179.107","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"domain_registered":"2010-02-10","domain_rank":5153099,"first_seen":"2025-03-01T09:25:51.032419Z","last_seen":"2026-06-02T08:52:28.359035Z","alert_count":3,"request_count":3,"received_data":5080,"sent_data":1436,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"manbetx-secure.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140562,"data":"","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-06-08T09:28:52.288547Z","times_seen":4489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","size":80821,"data":"","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-06-08T06:12:36.903345Z","times_seen":2071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gostat.com/script.js","fqdn":"gostat.com","domain":"gostat.com","tld":"com"},"ip":{"addr":"45.58.179.107","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d856f250f05dea7af28f74945a38f04b","sha1":"7599fe333956010ab0241049b56b66ddd546f064","sha256":"e2083eff15cc0f9eb7386b7eddebeae43da14cf4477db28424ec9f4afb6ebca4","sha512":"e90317d6235d1529cd93764337d59906e919acac43f513382b2abb0dbbb98ae4f17c7a5242e71879a1c40754d00497c86e82a24360397fafcff2d648a6bf8d85","ssdeep":"","tlshash":"ba51f8e5f29771f0ba68248295b88230f12556b1b94f00c0f9ba4c98741d50295b1f7a","size":2583,"data":"","first_seen":"2025-03-05T04:38:52.915299Z","last_seen":"2026-06-08T00:06:33.603244Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/e/dongpo/tz/tz.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4c227f0888c9eb058730d6d266b0cc8","sha1":"5f55a1a6c200e8668b5deb58b1cc49d2f0d5fa57","sha256":"4ce97a228737da2c078cf8a0ff04135e112c17238364e631c46c97b53061d104","sha512":"3d0c3d365d6cd29cbedb180b53f488d1e42ecdead99339d96da52b12e1244cfd779f27007b77feb05623fab5c871c3ec10c28e96896bf5b9e335fc787f48fef7","ssdeep":"","tlshash":"3a6000030000000c030000c0c3c030cc003330000300000f30c00330300c00300c3000","size":14,"data":"","first_seen":"2026-01-31T14:13:02.41021Z","last_seen":"2026-06-04T06:19:57.428522Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/bootstrap/js/home.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","size":5802,"data":"","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-06-08T06:12:36.899131Z","times_seen":746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/e/dongpo/tz/tj.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b4e3ab6c3f5484826c21475ee0ee8cb","sha1":"9611016fdbce00a1a44c3c50e4917d7debd2d845","sha256":"f8af9bd2969ce403873a715775f12d6e6131ae85d1f4ebd89de57d2e4f5699c2","sha512":"26d2fed83fee6e6e87d08219c8393c37f8c1961a86fc31fd16e5a4bbd05b2db9e655ddaff9fc5c994ef4622d5614c25f15e3e36afc4e7413c491b7efbaf91e7e","ssdeep":"","tlshash":"0bf02b7d1ee6d1308a3b715b217ed3b43a3120572482f546789cd9148f50fec0c59dd9","size":565,"data":"","first_seen":"2026-05-13T13:22:26.224929Z","last_seen":"2026-06-08T00:06:33.573673Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"manbetx-secure.com/skin/swiper/css/swiper-bundle.min.css","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/swiper/css/swiper-bundle.min.css HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 01:36:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686c762a-4691\"\r\nexpires: Tue, 02 Jun 2026 20:58:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18065,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17812)","md5":"ea28ae0aaf82709381c57d6a7daa7a05","sha1":"a7c528dc9018aeefed9a52337168decb220e2f61","sha256":"af8545de3876815292506711e1369bff9dfe57ec7e04c45c3e1bdac48a11f3b2","sha512":"9c63402a957e06b7c365a6cf5f53baaba991953e7bfda99d8feeaf177db6a2782a28004b1d82df2dcde362d5556e4891f6da300d63cf13d816144dadb1920f66","ssdeep":"192:1VmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Q:1gUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"d08245a85340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9132f6a9","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-06-08T09:43:09.863175Z","times_seen":5009,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/cover/manbetxsecurecom/about-27.webp","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/cover/manbetxsecurecom/about-27.webp HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34000\r\nlast-modified: Mon, 01 Jun 2026 02:12:30 GMT\r\netag: \"6a1cea8e-84d0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 553x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fcf15d8027969bf7bc7a1ad5ce9979fb","sha1":"b9a299b8dcf53f4e74150e8e69bcd59546df5946","sha256":"511a15f16922c38be63961127fb23aeb4b2ed2d5dc04a309026d1d287b952d36","sha512":"153fb9d7f601ec3555d28a3740ff271cd47f50975d6d5dad9d7fec80240afc42728b38dc97a8eea2c85a77939e56ee35d90d9f234368eb6deaef36476b442db5","ssdeep":"768:e18VdK91V87CtdA0HBSxITn8W8OY/xGueZVeTXa:e1OpXEwIj8WWxGueZUTK","tlshash":"0be2f2dab9c577ba0dd4cc630db8f80ac6398f8a4c0a533a6564a950d57c558e251ce4","first_seen":"2026-06-02T08:58:56.014201Z","last_seen":"2026-06-02T08:59:29.786279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/cover/manbetxsecurecom/why4-27.webp","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/cover/manbetxsecurecom/why4-27.webp HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75674\r\nlast-modified: Mon, 01 Jun 2026 02:12:31 GMT\r\netag: \"6a1cea8f-1279a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 813x542, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aab60ab94e8a30f71ddab963e83f2b46","sha1":"1ea77aeb7307f2ed3425002a0b532b0797d07bbc","sha256":"4ffadf50f4d2403359b0f03501e42d610ae8a56896e7e5c9deb98151f93feb53","sha512":"e225f22213ce0eda69a75443b72018bb763c714349084f860494b1679d560d9961a7d1815af125f3ff24bf0f951935c7065928513b5ebf83ce51a692755e32fa","ssdeep":"1536:y4T4IuGA4f/CNu6Bm/R92wtPk52S92npms8A/q0Zt+Q0:ppuGA6uLm/RRtPkkS94mwQQ0","tlshash":"ba730242b90c3b0cd1c966a6fe1370afd9d7bbeb1517dd40b510eaa99660f08c8667cc","first_seen":"2026-06-02T08:58:56.030075Z","last_seen":"2026-06-02T08:59:29.789993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":417,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:08.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/skin/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\nlast-modified: Fri, 13 Dec 2024 01:50:06 GMT\r\netag: \"675b92ce-26a0c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-06-08T10:26:06.766306Z","times_seen":28117,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":372,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/ico/favicon27.ico","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:08.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/ico/favicon27.ico HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:14 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Tue, 08 Jul 2025 20:42:24 GMT\r\netag: \"686d82b0-423e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"f4f8667e6ab43d540f34d969d9f8529e","sha1":"3709e4072e0cb7605fad8b1b6717a597d458204d","sha256":"706df75c636bba8cf239aafb3cd81a179ca4952c3af3275c3898dbcb67cb60b6","sha512":"a0c478a4712cc6bd940d4a5d8f84fb1f0b0a4098dc22719875483d5f2bf78fc00cc75e4b2e9199cac361825e770762859a3ecf39f89b63611a9809c6b17b85a3","ssdeep":"96:4I6EyM2UqbKf+Y+xogXOX6Ji2W2ngXEPPtRMP9OyyEe:NWWE3XOqJiOg0H4ZyEe","tlshash":"73729b673458ca01fd3345f72298da3914f3ed12ca5c9de173e23ea33faa8498846875","first_seen":"2026-04-03T09:54:39.316407Z","last_seen":"2026-06-07T21:15:40.897078Z","times_seen":13,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-02T08:59:06.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21160,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15953), with no line terminators","md5":"e3d83229dd98b7b7da180f00941cf254","sha1":"a00cc630562570016e14c5d103335e92b31f99ee","sha256":"814da304b468e22ce3a44af2a45c097346fdc6503858a80a975667622117af14","sha512":"a7629e572035ef90fea5084012c8fe32b906d8d52adfe10e03f1a665e599b0ba34bda0b75bfb0119bd2d8c77ef154b6cac35e3098016acdd82dad68088fde4a9","ssdeep":"192:rA+DPHOCrwZ3Z5VERtk9Qc7NOuL4PLwS0ZwuAYqgClcCQFn4Z++p8nv:r7bq3Z5WkSc7NOus8S2agbC849Iv","tlshash":"b792e833729174ab01a786edb23c778e62fbd14dca778a5963f78bc96bc0d90814014d","first_seen":"2026-06-02T08:58:56.043723Z","last_seen":"2026-06-02T08:59:29.795033Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1115,"timings":{"blocked":420,"dns":1,"connect":205,"send":0,"wait":275,"receive":0,"ssl":212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/bootstrap/css/module.css","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/bootstrap/css/module.css HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 13:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68823002-28112\"\r\nexpires: Tue, 02 Jun 2026 20:58:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":164114,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65518)","md5":"67e45932bedd92dd7bc2a7de1653677e","sha1":"b15f3b2e370d9a7c2c40ea991c8f4a839617702d","sha256":"6e25cdc64273a412026df8a7b3510d9ba7dd6cd75653dd3eb884371b4ace73e8","sha512":"d6130c594f82eefca5109421095dc8c0603b44c4c714bdb8956e64278c9c1625263a531a1ad401fa344f180c2f1cbe95af8246c9e33dc6a28316ab243f448591","ssdeep":"1536:qiVj2AhHm0CfrtrPr7AhhTQbdS6U8H2GXVxICl1gGqotJFFp4L/Xzbv9ALVTFCew:sAhhTQg6U8p45s5Q","tlshash":"c6f397309984202cf11bc5eae5d0abef32649801f663077ef66370a6d6c21ef577674a","first_seen":"2025-10-09T23:37:04.753197Z","last_seen":"2026-06-08T08:50:26.083549Z","times_seen":701,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/logo/manbetxsecurecom/logo.webp","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/logo/manbetxsecurecom/logo.webp HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4090\r\nlast-modified: Mon, 01 Jun 2026 02:12:30 GMT\r\netag: \"6a1cea8e-ffa\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x140, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9308d9e029702c2565f1401d7d396808","sha1":"cdcbbda3fb5d597f82fd575b845c54df442a1108","sha256":"0d9f10e802d745489f743734886a7ca740ac505f286229ce030d971c6faaaaf6","sha512":"cdb8e589b4f366b52f678dfbfb4857e3cf34a510b406f1244af7b12147119aa6016355c62756de89e2b63b179278eaca7fae5451a39212bc88d2cb5ab8648a6f","ssdeep":"","tlshash":"ba818f1e7c99b458b2318e6a17f1d4e12c4381b984c58608380b05fbf96fd5d1d6d8a1","first_seen":"2026-06-02T08:58:56.03764Z","last_seen":"2026-06-02T08:59:29.797766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/cover/manbetxsecurecom/why2-27.webp","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/cover/manbetxsecurecom/why2-27.webp HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56102\r\nlast-modified: Mon, 01 Jun 2026 02:12:30 GMT\r\netag: \"6a1cea8e-db26\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56102,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 841x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bff1a1108f0bd8b2b8e9075f3f4a71fa","sha1":"d1e00f10ce86a77085f1522d6dcfa92e8061d339","sha256":"5964955ab5845d568359d708a717d1ca5bff709a69cb7165839b4d2530ff77b2","sha512":"303c9fd0b8575db8f8214fba9c8ca3088e23d09b16fbdc496f0426c5e6bdf554fc922b810e59b06934fa1c72243a8a21b1e98672f7d05ca20f7cd7307f22eb3b","ssdeep":"1536:NQsW2sj72EoaAB2bNTtCf/xEAHfdc661yu0F6sSeNjz:GzaeNBmZEy81yzF/NNjz","tlshash":"db4302e50ad93904fd57183415e32e0555d112166c0c6b88c32b8ceb7eeadb2bb6e53e","first_seen":"2026-06-02T08:58:56.046839Z","last_seen":"2026-06-02T08:59:29.79945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/cover/manbetxsecurecom/security-27.webp","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/cover/manbetxsecurecom/security-27.webp HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47700\r\nlast-modified: Mon, 01 Jun 2026 02:12:31 GMT\r\netag: \"6a1cea8f-ba54\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 615x410, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c4831f971081db2edc7bfd2a01b054cc","sha1":"db2d050311d24e4f2be09c4ae161843cce0ce4d1","sha256":"00745d900fa5fa610e78e7c2bb767404c350a035ff619be38ce90b7a6ada9929","sha512":"770ecef8310b663a2d4164aba923f928025326d13e97857e54a45ef7d21ef298295e4886c96344a0e606a6fac118502105743246dd9cd0f22fab580b7af548ee","ssdeep":"768:z2hLphhEpDel5xrpcmkxH2kJFXpxeHodmengs84T/GhDE+jG4cWE443+JMRHN:KhHhDl5xrpcmY7AHodmds84yhDNNEaMT","tlshash":"c523f16bc39eed4845acbff6161a0714e9f9033993159082cb1187fcea29bb9470dd25","first_seen":"2026-06-02T08:58:56.04255Z","last_seen":"2026-06-02T08:59:29.801527Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":412,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/swiper/js/swiper-bundle.min.js HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jul 2025 16:58:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6865652e-22512\"\r\nexpires: Tue, 02 Jun 2026 20:58:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140562,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-06-08T09:28:52.288547Z","times_seen":4489,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/bootstrap/js/home.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/bootstrap/js/home.js HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jul 2025 04:49:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68748c76-16aa\"\r\nexpires: Tue, 02 Jun 2026 20:58:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5802,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-06-08T06:12:36.899131Z","times_seen":746,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gostat.com/api/send","fqdn":"gostat.com","domain":"gostat.com","tld":"com"},"ip":{"addr":"45.58.179.107","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:09.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 06:44:34 GMT","end":"Thu, 02 Jul 2026 06:44:33 GMT"},"fingerprint":{"sha1":"9A:C6:1A:D5:1A:BD:F0:B8:35:25:89:D9:C1:46:3A:8D:F7:83:F6:4C","sha256":"6E:A2:CE:DB:F4:EF:8B:CB:14:89:FC:A5:33:00:AB:A0:6B:8C:79:64:98:81:2E:AA:B7:58:73:59:5B:19:72:A4"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: gostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://manbetx-secure.com/\r\nOrigin: https://manbetx-secure.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type, Content-Type, Authorization, X-Requested-With\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://manbetx-secure.com\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline' gostat.com www.gostat.com;style-src 'self' 'unsafe-inline' gostat.com www.gostat.com;connect-src 'self' api.gostat.com cloud.gostat.com;frame-ancestors 'self' undefined\r\ndate: Tue, 02 Jun 2026 08:59:09 GMT\r\nserver: nginx\r\nvary: Access-Control-Request-Headers\r\nx-cache: BYPASS\r\nx-dns-prefetch-control: on\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":315,"dns":1,"connect":154,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"gostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/fontawesome/css/all.min.css","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/fontawesome/css/all.min.css HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 15:17:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6863fbf4-1907e\"\r\nexpires: Tue, 02 Jun 2026 20:58:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102526,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-06-08T09:02:14.017327Z","times_seen":11215,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/e/dongpo/tz/tz.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /e/dongpo/tz/tz.js HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 14\r\nlast-modified: Wed, 26 Nov 2025 21:26:50 GMT\r\netag: \"6927709a-e\"\r\nexpires: Tue, 02 Jun 2026 20:58:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"f4c227f0888c9eb058730d6d266b0cc8","sha1":"5f55a1a6c200e8668b5deb58b1cc49d2f0d5fa57","sha256":"4ce97a228737da2c078cf8a0ff04135e112c17238364e631c46c97b53061d104","sha512":"3d0c3d365d6cd29cbedb180b53f488d1e42ecdead99339d96da52b12e1244cfd779f27007b77feb05623fab5c871c3ec10c28e96896bf5b9e335fc787f48fef7","ssdeep":"","tlshash":"3a6000030000000c030000c0c3c030cc003330000300000f30c00330300c00300c3000","first_seen":"2026-01-31T14:13:02.41021Z","last_seen":"2026-06-04T06:19:57.428522Z","times_seen":40,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Jul 2025 16:41:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68640fcc-13bb5\"\r\nexpires: Tue, 02 Jun 2026 20:58:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80821,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-06-08T06:12:36.903345Z","times_seen":2071,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/e/dongpo/tz/tj.js","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /e/dongpo/tz/tj.js HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 565\r\nlast-modified: Wed, 17 Dec 2025 11:52:48 GMT\r\netag: \"69429990-235\"\r\nexpires: Tue, 02 Jun 2026 20:58:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3b4e3ab6c3f5484826c21475ee0ee8cb","sha1":"9611016fdbce00a1a44c3c50e4917d7debd2d845","sha256":"f8af9bd2969ce403873a715775f12d6e6131ae85d1f4ebd89de57d2e4f5699c2","sha512":"26d2fed83fee6e6e87d08219c8393c37f8c1961a86fc31fd16e5a4bbd05b2db9e655ddaff9fc5c994ef4622d5614c25f15e3e36afc4e7413c491b7efbaf91e7e","ssdeep":"","tlshash":"0bf02b7d1ee6d1308a3b715b217ed3b43a3120572482f546789cd9148f50fec0c59dd9","first_seen":"2026-05-13T13:22:26.224929Z","last_seen":"2026-06-08T00:06:33.573673Z","times_seen":18,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gostat.com/script.js","fqdn":"gostat.com","domain":"gostat.com","tld":"com"},"ip":{"addr":"45.58.179.107","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:08.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 06:44:34 GMT","end":"Thu, 02 Jul 2026 06:44:33 GMT"},"fingerprint":{"sha1":"9A:C6:1A:D5:1A:BD:F0:B8:35:25:89:D9:C1:46:3A:8D:F7:83:F6:4C","sha256":"6E:A2:CE:DB:F4:EF:8B:CB:14:89:FC:A5:33:00:AB:A0:6B:8C:79:64:98:81:2E:AA:B7:58:73:59:5B:19:72:A4"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: gostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline' gostat.com www.gostat.com;style-src 'self' 'unsafe-inline' gostat.com www.gostat.com;connect-src 'self' api.gostat.com cloud.gostat.com;frame-ancestors 'self' undefined\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Tue, 02 Jun 2026 08:59:08 GMT\r\netag: W/\"a17-1945eca1888\"\r\nlast-modified: Mon, 13 Jan 2025 08:31:30 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cache: BYPASS\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-frame-options: DENY\r\ncontent-length: 1447\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2582)","md5":"d856f250f05dea7af28f74945a38f04b","sha1":"7599fe333956010ab0241049b56b66ddd546f064","sha256":"e2083eff15cc0f9eb7386b7eddebeae43da14cf4477db28424ec9f4afb6ebca4","sha512":"e90317d6235d1529cd93764337d59906e919acac43f513382b2abb0dbbb98ae4f17c7a5242e71879a1c40754d00497c86e82a24360397fafcff2d648a6bf8d85","ssdeep":"","tlshash":"ba51f8e5f29771f0ba68248295b88230f12556b1b94f00c0f9ba4c98741d50295b1f7a","first_seen":"2025-03-05T04:38:52.915299Z","last_seen":"2026-06-08T00:06:33.603244Z","times_seen":80,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":316,"dns":1,"connect":154,"send":0,"wait":156,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"gostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gostat.com/api/send","fqdn":"gostat.com","domain":"gostat.com","tld":"com"},"ip":{"addr":"45.58.179.107","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:09.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gostat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 06:44:34 GMT","end":"Thu, 02 Jul 2026 06:44:33 GMT"},"fingerprint":{"sha1":"9A:C6:1A:D5:1A:BD:F0:B8:35:25:89:D9:C1:46:3A:8D:F7:83:F6:4C","sha256":"6E:A2:CE:DB:F4:EF:8B:CB:14:89:FC:A5:33:00:AB:A0:6B:8C:79:64:98:81:2E:AA:B7:58:73:59:5B:19:72:A4"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: gostat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://manbetx-secure.com/\r\nContent-Type: application/json\r\nContent-Length: 311\r\nOrigin: https://manbetx-secure.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":311,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"3ab2075c-b2ce-4c62-9e55-ce479ae3d935\",\"hostname\":\"manbetx-secure.com\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"%E4%B8%87%E5%8D%9A%E4%BD%93%E8%82%B2%E5%AE%98%E7%BD%91%20-%20%E4%B8%87%E5%8D%9A%E4%BD%93%E8%82%B2APP%E4%B8%8B%E8%BD%BD%20-%20MANBETX%20SPORTS\",\"url\":\"/\"}}"}},"response":{"raw":"HTTP/2 400 Bad Request\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://manbetx-secure.com\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline' gostat.com www.gostat.com;style-src 'self' 'unsafe-inline' gostat.com www.gostat.com;connect-src 'self' api.gostat.com cloud.gostat.com;frame-ancestors 'self' undefined\r\ndate: Tue, 02 Jun 2026 08:59:09 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: BYPASS\r\nx-dns-prefetch-control: on\r\ncontent-length: 129\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"b6dca927bd5f7c578bd066ceacdbf6a2","sha1":"35c7971e4f747fd6985c58e00c9adab2f8dcf926","sha256":"2c619a67b8fd85ebcc3a21a6e450c2040a75f056aeab2b782ec3dd6a5276a701","sha512":"f62c24bb9d3a83415b552b98a79d49adf199b4ef0e6e3e2ec563e9734494adfc7faaf767adc9728e66742173a57ecceb2cc5340791084d43ecb30f20b8824f3a","ssdeep":"","tlshash":"06b02b4be306b0f605c30c8081038050e063e1e146b50004062071ec147c46bb24f314","first_seen":"2026-05-29T21:13:24.747939Z","last_seen":"2026-06-05T02:36:24.462897Z","times_seen":12,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"gostat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/bootstrap/css/bootstrap.min.css","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 15:17:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6863fbf4-38a52\"\r\nexpires: Tue, 02 Jun 2026 20:58:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232018,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"50c95aae1a6c1e089c11681d1e1906f8","sha1":"a65e4fd8db9bd0440de2d6d73c9e7cd00fce4a8d","sha256":"cd1826581e4f2b80af4f1e05897b316c7698441063cffaefbbdeec382ee4cd72","sha512":"7f0edff9370c8d36fb6e96cb25994ff20d98e17702c85656f2ecbc1ec459b07fd2c1b330d2994a1c51ebf7d0cdde5d3856c60dc2fce27145ffeaababbc8c5bc7","ssdeep":"1536:v9xnXGi9GfJkfvq5wlP7cQZDR9uvV982sYRElV6V6pz600I41r:HnXp9GfrV98II6V6pz600I41r","tlshash":"d03482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-06-19T07:12:41.126365Z","last_seen":"2026-06-08T08:50:26.082668Z","times_seen":2015,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/cover/manbetxsecurecom/why1-27.webp","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/cover/manbetxsecurecom/why1-27.webp HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81346\r\nlast-modified: Mon, 01 Jun 2026 02:12:30 GMT\r\netag: \"6a1cea8e-13dc2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 562x374, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9d155f9a238af7a304a25ed3cf95fe25","sha1":"e22cded9cffccbb6f9c69f31fcb339d366064357","sha256":"2a25258dd24d0b185b6946f96cb1fb2e9341c2a49d652f6f1a3ae910a3d00e84","sha512":"6511f6b41b0715ceb6083b6bb70b2fe495a7b97dbba18b835bffaa8507f8a2edf892ff9d1f1999eeb763cf2ac20ad14cea89067f003a84e0eeba95702fff7d98","ssdeep":"1536:6d6ngkp1q5YlOlcUchs9Qy8OukIBhH8XgpyXXkShqpgvCkijXtfico:K2gknq5YlsPf2y1ZVX0QWDNico","tlshash":"0583127c6b3db9e5780947877ecedeb62a0644011d67e762521130ae4d7e83fc937228","first_seen":"2026-06-02T08:58:56.045642Z","last_seen":"2026-06-02T08:59:29.811555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":416,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/cover/manbetxsecurecom/why3-27.webp","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/cover/manbetxsecurecom/why3-27.webp HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62974\r\nlast-modified: Mon, 01 Jun 2026 02:12:30 GMT\r\netag: \"6a1cea8e-f5fe\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 716x477, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7a555652b9170355a51f908d802b61b8","sha1":"b50b13c686eb5e61f82288bc594d4f0f2eb5b1a1","sha256":"3d4408d469d626ff60486d02559ef52ecb6b8b27300b43773db3b11df408e44c","sha512":"cf1719f1696200fc8b8d30f31e8348cca190967cc3fa253f9335f1c75e0d363406ee72e298c5e14557d7c0585d5725882134ce8469670189c4ee693834fc7cd9","ssdeep":"1536:hE3rfuVAGIXK5a+dHAJNXQR1wZKYorHOD198bus:hE3roABCa+kNXQR1wpIHO59e","tlshash":"5f5312ae892d3b7dc768f515311a260284db745ef5377cf54f4a411b200f69e1a342aa","first_seen":"2026-06-02T08:58:56.039335Z","last_seen":"2026-06-02T08:59:29.812768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetx-secure.com/skin/cover/manbetxsecurecom/app-27.webp","fqdn":"manbetx-secure.com","domain":"manbetx-secure.com","tld":"com"},"ip":{"addr":"177.210.156.92","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetx-secure.com/","date":"2026-06-02T08:59:07.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ballbetplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 01:09:01 GMT","end":"Sun, 30 Aug 2026 01:09:00 GMT"},"fingerprint":{"sha1":"A3:7F:B7:48:B6:75:68:C4:0B:6A:37:D9:0F:A7:0F:4D:65:D1:FA:C2","sha256":"14:26:F0:F0:6E:DA:3E:87:D3:E1:AF:5D:CE:94:4B:9C:E6:BD:7A:2D:2E:90:3B:26:E0:2B:E8:5D:99:A0:E2:C8"}}},"request":{"raw":"GET /skin/cover/manbetxsecurecom/app-27.webp HTTP/1.1\r\nHost: manbetx-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetx-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Jun 2026 08:58:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 72896\r\nlast-modified: Mon, 01 Jun 2026 02:12:31 GMT\r\netag: \"6a1cea8f-11cc0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72896,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 658x370, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba23b55d5ee846340ca08000a39cc6d2","sha1":"48b1282d95c369013110253f5b331c9acfa61ba0","sha256":"3d621bf0783e28cd1da21281285cfd1b0d8c13d8a47aba492817f480c017d01b","sha512":"31f3c8e63ca0fcbabc250273e2fd91282c162b80c219fc5e87cb63565c4bcd32fcd87f3e12fe8f53a3f78f97b63ecdba7b29599065ebca7df152358e29beec92","ssdeep":"1536:tVhr+wEyP/7NtbrISYdvs3yTXoZ1W/3LCvOOY+u7XwglcrgqcR1jRx6rtQPvp+0X:tVRP5t3ISYpkfvOOY+u7Xw8c0RRND6ZA","tlshash":"6d63123845290e29080d917e62d346731d8db89b3643d3fac5d87057336b7e76c2fa5a","first_seen":"2026-06-02T08:58:56.033323Z","last_seen":"2026-06-02T08:59:29.81441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":418,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}